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Introduction 


This Study Guide is designed to help you review the terminology and concepts presented in 
Networking Fundamentals by Richard M. Roberts. It will also help prepare you for the CompTIA 
Network+ Certification exam. It is divided into two sections: Chapter Review and CompTIA 
Network+ Reference. 

The first half of this Study Guide, Chapter Review, serves as a review of the key terminology 
and concepts presented in the Networking Fundamentals textbook and those you will encounter on 
the CompTIA Network+ Certification exam. The introduction of each Chapter Review lists the tasks 
you should be able to do and the concepts you should be familiar with to successfully complete 
the CompTIA Network+ Certification exam. The practice exercises are grouped according to 
related terms and concepts found in the corresponding chapter. They consist of filling in the blank, 
matching, and labeling. Some practice exercises ask that you derive an answer from the information 
given, such as converting a given decimal number to a binary number, dividing an assigned IP 
address into subnets, or determining a distinguished name from a directory map. 

The second half of this Study Guide, CompTIA Network+ Reference, presents one topic related 
to a specific CompTIA Network+ Certification exam objective per page. At the top of each page, 
the featured topic is described, followed by an illustration or a table that will better enable you to 
remember the key points related to the topic. Also, a list of related topics is presented to help you 
draw associations between them and the featured topic. At the bottom of the page is the related 
CompTIA Network+ Objective. 

This Study Guide, when used as a supplement to the Networking Fundamentals textbook, will help 
you successfully complete a course in networking fundamentals and will increase your ability to 
pass the CompTIA Network+ Certification exam. 
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Name — _ Date Period 


Introduction to 
Networking 


Introduction 


For the Network+ Certification exam, you should be able to identify the major network topologies, 
differentiate between common network devices, recall the function of common network protocols, 
and recall the function of each OSI model layer. You should also be familiar with network models 
and related terminology. 


Practice 1.1 
Label the network topologies. 


bus hierarchical star l hybrid mesh 


ring star tree 


A 
7S aN 
sah 
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Practice 1.2 
Fill in the blanks for the statements about the network topologies. 


access port backbone cells i hub 
network topology node terminating resistor wireless topology 
1. The physical arrangement of computers, computer-related ik 


devices, communications devices, and cabling in a 
network is referred toas 


2. A(n) is any device attached to the network that is 2s 
capable of processing and forwarding data. 


3. The bus topology is often used as a(n) to link other 3; 


topologies. 


4. Abus topology requires a(n) at each cable end to 4. 
absorb the signals when they reach the end of the bus. 


5. Ina star topology, cables connect each node to a(n) 5 
on a hub or switch. 
6. The ____ does not use cables to communicate between 6. 


nodes. 


7. In wireless communications, towers are configured throughout Ze 
an area and divide the area into zones called 


8. The star topology uses a(n) as a common electrical EE — A 6 
connection to all nodes in the topology. 


Practice 1.3 


Match the network classification to its definition. 


i a LAN a. A network that consists of two or more LANs 

2. MAN connected with private or public communications 
lines within the same geographic area, such as a city or 

2. == — WAN a university campus. It is managed by a single entity. 


b. Anetwork that is usually confined to a single building 
and is managed by a single entity such as a company. 

c. Anetwork that consists of a large number of 
networks and PCs connected with private and 
public communications lines throughout many 
geographic areas. 
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Name 


Practice 1.4 


Fill in the blanks for the statements about the network models in illustrations A and B. 


centralized client/server database server decentralized 


dedicated server file server peer-to-peer print server 


A 
Client : a = sa — — 
B “Client Client 
1. The network in illustration A is an example of a(n) —— i 
network. 
2. The network in illustration B is an example of a(n) 2. 
network. 
3. The methodology used to administer a client/server 3. 
network is called administration. 
4. The methodology used to administer a peer-to-peer 4. 
network is called administration. 
5. A(n) is used to store data files that can be accessed 5; 
by a client. 
6. A(n) coordinates printing activities between clients 6. 
and printers. 
7. A(n) contains data files and software programs that sE 
query the data. 
8. A server that serves a single function is referred to as a(n) 8. 
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Practice 1.5 


Fill in the blanks for the statements about network communications. 


connectionless-oriented connection-oriented driver logical identification 
MAC address operating system protocol 
1. Microsoft Windows Server 2008 is an example of a(n) ll 
2. A direct connection between a source and destination 2 
computer is referred to as 
3. Aconnection between a source and destination computer 3, 
that is not a direct connection is referred to as 
4. A(n) is a group of software programs that handle 4. 
packet formatting and control data transmission. 
5. A(n) is a software program that allows a computer 5. 
to communicate with and transfer data to and from 
computer hardware. 
6. The physical ID of a network card is called a(n) : 
7. A name used to uniquely identify a computer on a e 
network is called z 
Practice 1.6 
Fill in the blanks for the statements about network protocols. 
ATM FIR NetBIOS WEE IP LLDP 
1. One of the specifications of the protocol is limiting ale 
network device names to 15 characters. 
2. lhe protocol was developed for DARPA to 2 
communicate over the Internet. 
3. The protocol is a wireless protocol that uses Infrared 3i 
technology to transmit data. 
4. The allows network devices to automatically 4. 
exchange information. 
5. The protocol was designed for transmitting data, 5i 


voice, and video. 
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Name 


Practice 1.7 


Match the name of the network device to its definition. 


1 active hub a. Allows for the quick connection and disconnection of 
>. bridge Token Ring cables while maintaining the logic of the 
ring topology. 
3 brouter b. Contains the electronic components needed to send 
4 gateway and receive a digital signal. 
c. Makes decisions about routing a packet based on 
5 media converter packet content. 
a multilayer switch d. Amplifies or reshapes a weak signal into its original 
Prion: strength and form. 
7. ____ multistation access unit e. Acts only as a central connection point for network cables. 
8 network interface card f. Acts as a central connection point for network cables 
and regenerates digital signals like a repeater. 
2 passive hub g. Am the local ~ ee to the aremm 
10. repeater h. Changes one type of electrical signal into another or 
interfaces one cable type to another. 
11. router i. Divides the network into smaller segments, reducing 
i2 switch the chance of collisions. 


j. Filters network traffic or creates subnetworks from a 
larger network. 

k. Navigates packets across large networks, such as the 
Internet, using the most efficient route. 

l. Combines router and bridge functions. 


Practice 1.8 
Match the standard or organization to its definition. 


VAN a. Astandards maintenance organization mainly 
> CERN concerned with fiber optics, user equipment, wireless 
e A communications, and satellite communications. 
Ba == HA b. Developed the OSI model and is interested in the 
4 IEEE standardization of computer equipment. 
Traa c. Provides recommendations for Web page language 
O standards. 
6 TIA d. Responsible for the original development of the 
l World Wide Web. 
AA e. Prompts voluntary conformity and standardization. 
8 W3C f. Tests products and materials for safety standards. 
g. Concerned with radio communications. 
h. Continually develops standards for the networking 


and communications industry. 
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Practice 1.9 


Match the network device layer to its definition. “ii 
A layer 1 device a. Makes decisions about where a packet is sent based 
2 e Ee on a MAC address or a logical name. 
l y b. Makes no decision about where a packet is sent. 
3. layer 3 device c. Makes a decision about where a packet is sent based 


on a protocol such as the Internet Protocol. 


Practice 1.10 


Label the layers of the OSI model. Beside each layer, write a brief description. 


application data link network physical 


presentation session transport 
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Name__ Date 
Period 


Network Media— 
Copper Core Cable 


Introduction 


For the Network+ Certification exam, you should be able to categorize the IEEE 802.3 classifications 
and recall their characteristics. Also, be prepared to categorize network cables, identify network 
connectors, and differentiate between wiring standards. 


Practice 2.1 


Label the electrical signals. The following terms can be used more than once. 


amplitude cycle i time voltage 
b. 
oe LO a 
a e. 
+5 +5 
a 0 0 


dione m n aN f. One 
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Practice 2.2 


Determine the frequency and amplitude of the following analog and digital signals. a 
1 second 1 second 
+10 A an 
+5 +5 
0 0 
5 = 
-10 -10 
A B 
1. The frequency of the analog signal in illustration A is J; 
= H 
2. The frequency of the digital signal in illustration B is Ze 
Hz. 
3. The amplitude of the analog signal in illustration A is 3 
volts. 
4. The amplitude of the digital signal in illustration B is 4. 
volts. 


Practice 2.3 


Fill in the blanks for the statements about electrical characteristics. yx 
attenuation crosstalk interference latency 
noise Time to Live 


1. Aloss of signal strength is referred to as E i, 

2. An undesired electromagnetic signal imposed on a ze 
desired signal is called 

3. Interference that comes from neighboring conductors 3 
inside a wire’s insulating jacket is called 

4. The amount of time it takes a signal to travel from its 4. 
source to its destination is called ____ 

5. If a signal exceeds the allocated , itis removed from 3) 
the network to prevent it from circulating forever. 

6. Another name for electromagnetic interference is 6. 
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Name 


Practice 2.4 


Fill in the blanks for the statements about data transmission. The following terms can be used more 
than once. 
l A A 


bandwidth Baseband Broadband simplex 
full-duplex half-duplex 
1. The of analog transmission can support several il 
frequencies at once. 
2. When a digital signal is transmitted over a cable, it uses 2 
the entire 
3. The method of transmitting data in the form of several E 
analog signals at the same time is referred toas 
4. The method of transmitting data in the form of a digital 4. 
signal, using the entire bandwidth of a cable is referred to 
as 
5. The bi-directional communication that occurs between 5 
two devices simultaneously is communication. 
6. Communication that occurs in one direction only is 6. 
communication. 
7. Bi-directional communication that occurs in one direction e 
at a time is communication. 
Practice 2.5 
Fill in the blanks for the statements about electronic terms. 
decibel impedance magnetic induction 
reflected loss resistance 
1. The opposition to direct current is , Whereas the 1. 
opposition to alternating current is 
2. The amount of signal reflected from the end of a cable is 2 
3. An electrical phenomenon in which the magnetic field 3: 
encircling a current-carrying conductor induces current in 
a conductor of close proximity is 
4. A(n) is a unit of measurement that expresses the 4, 


relationship of power between two electrical forces. 
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Practice 2.6 
Fill in the blanks for the statements about crosstalk. 


Alien Crosstalk Equal Level Far-End Crosstalk Far-End Crosstalk | Near-End Crosstalk 


. The measurement of reflected loss at the near end, or 


input end, of a cable is 


. Ameasurement of reflective loss at the far end, or output 


end, of a cable is 


. Ameasurement calculated by subtracting the effects of 


attenuation from the FEXT measurement is 


. Ameasurement of the noise introduced outside the cable 


jacket, typically caused by other network cables in close 
proximity is 


Practice 2.7 
Label the parts of each cable. 


18 


braided copper shield copper core 


insulating jacket insulating outer jacket 


dielectric foil shield 


plastic spine twisted pair 
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Name 


Practice 2.8 
Identify the following connector types. 


BNC F-type RJ-45 


Practice 2.9 
Match the media type to its definition. 


de coaxial cable a. Twisted pair cable in which shielding is applied to 
2. RG-58 - the entire cable assembly or to individual cable pairs. 
b. Twisted pair cable that does not contain shielding. 
3 RG c. Also known as Thinnet. 
a RG-8 d. Also known as Thicknet. 
e. Consists of a copper core conductor surrounded by 
3. —— SIE an insulator, shield, and insulating jacket. 
6 twisted pair f. Standard cable for CATV and satellite systems. 
g. Consists of four pairs of twisted conductors. 
7. —— Om? 
Practice 2.10 


Fill in the chart for the given categories of twisted pair cable. 


Category Maximum Frequency Rating Data Rate 


TA 

Category 5 E IE "Mbps (2 pair) 
Mbps (4 pair) 

Category 5e E VIEIZ == Mbps (2 pair) 
— ~ Mbps 4 ia 
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Practice 2.11 


Fill in the data rate and category (10 Mbps, Fast Ethernet, Gigabit Ethernet, and 10 Gigabit Ethernet) I 
of the following 802.3 classifications. 


c lassification | Data Rate Category 
10BaseT 


100Basel4 


100BaseTX 
| | 


1000BaseCX 


1000BaseT 


10GBaseT 


Practice 2.12 


Label the specifications of the network in the illustration. 


e. Topology: 


mua segment 
length: ____ meters 


tz 


* Minimum segment 


: = eal meters 
b. Maximum Minimum 
cable length: cable length: | 
meters | 


meters 


10BaseT, 100BaseTX, 100BaseT4, or 1000BaseT Network 
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Name 


Practice 2.13 


Fill in the blanks for the statements about 802.3 wiring and connections. 


Automatic Medium-Dependent Interface Crossover (Auto-MDIX) crossover cable 
Power over Ethernet (PoE) RJ-45 rollover cable straight-through cable 
1. A(n) is a special cable where the pin order is T 
completely reversed on one end of the cable. 
2. A(n) allows a transmit signal from one computer 2. 


to be sent to the receive pins of a network card on the 
other computer. 


3. A(n) is constructed with each numbered pin EN 
connecting to the matching numbered pin on the opposite 
end of the cable. 


4. An electronic chip technology incorporated into Gigabit 4. 
Ethernet devices to automatically reassign pin functions 
and eliminate the need for a crossover cable is 


5. 8P8C is another name for 


6. The IEEE standard specifies the supply of small 6. 
amounts of electrical power to network devices such as 
cameras, IP phones, Wireless Access Points, speakers, and 
phone or PDA chargers. 


Practice 2.14 


Color the twisted pair conductors according to the indicated color standard. 
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Practice 2.15 


Fill in the blanks for the statements about wiring faults. 


ground open l short 
1. A(n) occurs in cabling when two conductors are 1. 
improperly connected, resulting in a shorter circuit path. 
2. A(n) occurs when the length of a conductor has an 2 
open spot. 
3. A(n) occurs when a conductor connects to the earth 3. 
through a continuous path. 
Practice 2.16 
Label the common twisted pair wiring errors. 
crossed pairs normal : reversed pair split pair 
A A IO 3 
2 3 
3 2 
IS ae re 
1 1 
2 2 
3 3 
4 4 
a. 


Nr 
A OO 


S 1 
A O A r 
l —_—_ 1 
 5—_ 2 
A Á- _— - _ __—_—_—-MIIMM«««¿Mé€¿4$€«*AA aaao 
4. AA AAA Al 
b. 
A O ra 
2 1 
A A r 
4 4 
1 KK KK _  _—————————————JJ————————— | 
2 2 
¿E A A ae 
4 —  _——_o_— _—_—_——— _ —_—__—__—_—_—_—_— 4, 
Cc. 
== EE a AR | 
A i | 
1 1 
Y A ol 
3 3 
4 4 


d. 
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Name 
Period 


Fiber-Optic Cable 


Date 


Introduction 


For the Network+ Certification exam, you should be able to recall the characteristics of fiber-optic 
cable types, categorize IEEE 802.3 classifications that specify fiber-optic cable and recall their 
characteristics, and identify fiber-optic connectors. 


Practice 3.1 
Place a check mark next to each statement that states an advantage of fiber-optic cable. 


1; Provides for data security. 


Resistive to breaks and bends in the fiber-optic core. 


. — Immune to electromagnetic interference. 
Lightweight and small in diameter. 
a Safety. 


Does not require a high level of expertise to install a connector. 
. ——— Wide bandwidth. 


Corrosion- and water-resistant. 


© ONDA oT Fw N 


Supports data transmission over longer distances than copper core cable. 


Practice 3.2 
Match the fiber-optic cable transmission characteristic to its definition. 


1. dispersion a. The loss of signal strength due to impurities in the 
2: extrinsic losses e n ; 
b. The distortion of a light wave as it reflects off the 
3. Fresenel reflection loss core cladding. 
4 scattering c. A type of signal loss that commonly occurs at connection 


points in fiber-optic cabling and is due to refraction 
property differences in the core material, the connector 
materials used for sealing the connector, and air. 

d. Signal losses caused by physical factors outside the 
normal core, such as splices, connectors, and bends in 
the fiber core. 
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Practice 3.3 
Label the fiber-optic cable. 


buffer cladding glass or plastic core sheath 
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Name 


Practice 3.4 


Fill in the blanks for the statements about single-mode and multimode fiber-optic cable. The 
following terms may be used more than once. 
A ISK 


graded-index multimode single-mode step-index 
= Sm A 


Cladding 


625um  125um 


å = 


A — la Sa 


Cladding 


Core 


B ——=> —> — — 
1. The fiber-optic cable in illustration A is an example of ___. E 
2. The fiber-optic cable in illustration B is an example of : 
fiber-optic cable has a large core diameter and is 3: 
susceptible to attenuation due to dispersion. 
4. The core of fiber-optic cable is designed to closely 4. 


match the wavelength of the light signal. 


fiber-optic cable can carry light farther than —— 5 
fiber-optic cable. 


multimode fiber-optic cable is designed with a 6. 
varying grade of core material. 


7. ___ multimode fiber-optic cable is a general multimode 7. 
fiber-optic cable that does not counter dispersion. 
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Practice 3.5 
Fill in the chart for the given IEEE 802.3 classifications. 


IEEE 802.3 Single-Mode (S) or Core Diameter in Wavelength Cable Distance 
Classification Multimode (M) Microns 


10BaseFL a_i | 5 nm | E — 
100BaseFX nm z = in 
=a eee 

M nm 


nm 


nm = o 
m 

nm km 

nm km 

nm m 


E S A ES 
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Name 


Practice 3.6 


Record the specifications of the FDDI network in the illustration. 


Secondary ring Node 2 Primary ring 


Node 4 


a. Topology: 
b. Acess Method: 


c. Data rate: 

d. FDDI single-mode cable distance: 
e. FDDI multimode cable distance: 
f. FDDI single-mode core diameter: 


g. FDDI multimode core diameter: 
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Practice 3.7 


Label the fiber-optic connectors. 


FC LC MTRJ 


SC 
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Period 


Wireless Technology 


Introduction 


For the Network+ Certification exam, you should be able to compare the characteristics of IEEE 
802.11, authentication, and encryption wireless standards. You should also be able to implement a 
basic wireless network. 


Practice 4.1 


Fill in the blanks for the statements about radio and microwave transmission. 


carrier wave channel | demodulation 
modulation receiver transmitter 
1. A is an electromagnetic wave of a set frequency that dE 
is used to carry data. 
2. The process of mixing a data signal with a carrier wave 2i 
is 
3. The process of separating a data signal from a carrier 3 
wave is 
4. A generates a carrier wave and modulates the data 4. 
signal into the carrier wave. 


Go JA receives the modulated signal and demodulates it. 


6. The bandwidth of a carrier wave is referred to as a 
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Practice 4.2 
Label the ISM band with related frequencies and 802.11 wireless standards. 


m ISM band e — > 


al b. pr 


Industrial Scientific Medical 


Related 802.11 standards Related 802.11 standards 


d. e. 
Practice 4.3 
Label the antenna styles. 
dipole flat panel omni parabolic yagi 


mis 
f+ 


HHH 
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Name 


Practice 4.4 


Label the transmission techniques. 


direct sequencing spread spectrum (DSSS) frequency hopping spread spectrum (FHSS) 
orthogonal frequency-division multiplexing (OFDM) 


Each 83-MHz channel 
is divided into 
3 22-MHz channels 


52 300-kHz 
channels 


100-MHz 


bandwidth 
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Practice 4.5 


Fill in the blanks for the statements about data transmission techniques. The following terms may 
be used more than once. 


direct sequencing direct sequencing spread spectrum (DSSS) frequency hopping 
frequency hopping spread spectrum (FHSS) Multiple Input Multiple Output (MIMO) 
orthogonal frequency-division multiplexing (OFDM) spatial multiplexing 


1. The spread spectrum technique that transmits data on lh 
multiple channels simultaneously is called 


2. The spread spectrum technique that transmits data on 2i 
multiple channels sequentially is called 


3. Frequency hopping is also referred to as 


4. Inthe transmission technique, data packets hop 4. 
from one channel to another in a set pattern determined 
by a software algorithm. 


pe tie transmission technique is limited to a 5i 
maximum of a 2-Mbps data rate. 


6. Direct sequencing is also referred to as 


7. Most vendors use the transmission technique at 
11 Mbps for wireless network systems. 


8. The data rates for are 11 Mbps and 33 Mbps. The 8. 
33 Mbps is a result of using all three 22-Mbps channels at 
the same time. 


9. The transmission technique uses the 5-GHz frequency on 
and can achieve data rates as high as 54 Mbps. 


10. In the transmission technique, each channel is 10. 
broadcast separately and is referred to as multiplexed. 


11. Transmitting two or more streams of data in the same Jae 
frequency channel is referred to as 


12. The networking technology that uses two or more streams 12. 
of data transmission to increase data throughput and the 
range of the wireless network is 


32 Networking Fundamentals Study Guide Copyright by Goodheart-Willcox Co., Inc. 


Name 


Practice 4.6 
Label the wireless network arrangements. 


ad hoc mode infrastructure mode 


EE 


2 


mM) a 
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Practice 4.7 
Fill in the blanks for the statements about wireless networking. Not all of the following terms will be used. 


BSS CSMA/CA CSMA/CD dipole 
ESSID IBSS omni overlap area 
room security speed SSID 
Wireless Access Point (WAP) yagi 
1. All IEEE 802.11 networks use the access method. q 
2. A Wireless Access Point (WAP) has a(n) -type antenna. Ps 
3. A(n) is similar to a Windows workgroup name or a 3 
domain name. 
4. One of the greatest concerns or disadvantages of a 4. 
wireless network is 
5. For computers to communicate with each other in an ad 5i 
hoc wireless network, all computers must be inside the 
same 
6. A(n) provides a connection between a wireless 6. 
network and a cable-based network. 
AND) is an IEEE term used to describe a group of ie 
wireless devices connected as an infrastructure network or 
an SSID. 
8. Anetwork that does not use a Wireless Access Point 8. 
and usually is a direct connection between two wireless 
devices is referred to as a(n) 
9. A(n) is two or more Wireless Access Points or 9i 


wireless devices using the same SSID. 


Practice 4.8 
Fill in the chart for the given IEEE 802.11 classifications. 


802.11 Radio Frequency Maximum Data Range Transmission Method 
Specification Rate (approximate) 


802.11b 


802.11g AE. Se MOS 
(802.11b mode) 
ns E =—— Mbps 
(802.11g mode) 
802.11n A Up to 300 Mbps. 
Possibly as high as 
—_ 600 Mbps 
4 


3 
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Practice 4.9 


Identify the following statements as relating to infrared, Bluetooth, or satellite. The following terms 
may be used more than once. 
eee ee 


Bluetooth infrared satellite 
See ee 


La is specified in IEEE 802.15 Working Group Wireless de 
Personal Area Networks (PAN). 
2 is a short-range wireless system designed for 30 2. 


meters or less. 


suffers from propagation delay. oe 


4. When networking with , communicating devices 4. 
must be in a direct line of sight. 


5. A(n) 


6. A(n) network is referred to as a piconet or a 6. 
Personal Area Network (PAN). 


travels in a geosynchronous orbit. 5 


is designed for appliances such as telephones, 7. 
laptops, palm tops, digital cameras, personal digital 
assistants, headsets, printers, keyboards, and mice. 


devices do not interfere with 802.11b devices when 8. 
operated in the same area because they use different 
formats for configuring data. 


Practice 4.10 


Identify the following characteristics as relating to 802.15, 802.16, USB wireless, or Bluetooth. The 
following terms may be used more than once. 


802.15 802.16 Bluetooth USB wireless 


. Broadband Wireless Access (BWA): 

. Connects devices such as cameras and mobile phones to a PC: 

. Data rates as high as 70 Mbps over distances of 30 miles or more: 
. Effective range is 30 meters or less: 

. Small Ethernet network consisting of personal wireless devices: 

. Speeds of up to 480 Mbps at a maximum range of 3 meters: 


. Wireless Personal Area Networks (WPAN): 


SIRO OFF a WO NR 
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Practice 4.11 


Fill in the blanks for the statements about wireless networking. 
A A A A A 


geosynchronous orbit infrared transmission 


microwave transmission propagation delay 


1. When a satellite’s speed is synchronized with the earth’s ls 
rotational speed, the satellite is said to be in ____. 


2. The time it takes for data to be transmitted from the earth 2 
and satellite is referred to as 


3. Point-to-point communications between two devices such a 
as a PDA and PC typically use 


4. Communications that use radio wave frequencies between 4. 
1 GHz and 300 GHz is referred to as 


Practice 4.12 


Match the authentication or encryption protocol to its definition. 


il, — 602. 1x a. A data encryption protocol 
that makes a wireless network 


D Extensible Authentication Protocol (EAP) 
as secure as a wired network. 
3: Protected Extensible Authentication Protocol (PEAP) b. A protocol that ensures 
4. Wireless Application Protocol (WAP) authorized access to the 
l i network system and network 
by; Wired Equivalent Privacy (WEP) resources on both wireless and 
6. i-Fi Protected Access (WPA-2) ur noia 
c. Aprotocol that combines the 
8. _____ Wi-Fi Protected Access-Pre Shared Key (WPA-PSK) encryption. 


d. An improved version of EAP. 

e. A variation of WPA which can 
automatically generate a new 
key after a specified amount 
of time or number of packets 
exchanged. It is designed 
for small-office /home-office 
(SOHO) networks. 

f. A draft standard that provides 
a means for a client and server 
to authenticate with each other. 

g. Uses the Advanced Encryption 
Standard (AES) and is backward 
compatible with WPA devices. 

h. Ensures the safe exchange 
of data between a wireless 
network and a portable Wi-Fi 
device. It uses a set of keys 
to identify a device and to 
encrypt the data exchanged. 
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Name — CA Date 
Period 


Digital Encoding and 
Data Transmission 


Introduction 


For the Network+ Certification exam, you should be able to identify a network protocol as 
connection-oriented or connectionless and a network technology as packet switching or circuit 
switching; recall the function of unicast, multicast, and broadcast addressing schemes; identify the 
UDP and TCP default ports, and recall the characteristics of a VLAN. You should be able to recall 
the function of each OSI model layer and the order in which the data packaging process occurs. 


Practice 5.1 
Fill in the blanks for the statements about digital signals and encoding. 


asynchronous bipolar 
Cyclic Redundancy Check (CRC) digital encoding 
Manchester encoding Non-Return to Zero (NRZ) 
parity check synchronous 
time period unipolar 
+5 volts 
+5 volts 0 volts 
0 volts -5 volts 
A B 
+5 volts 
0 volts 
-5 volts 
€ 
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1. Illustration A shows an example of a(n) digital signal. 1. 
2. Illustration B shows an example of a(n) digital signal. Pe 
3. When a network interface card converts data into a digital 
pattern acceptable to the network media, takes place. 
4. The rate of recurrence of an expected signal level change is 4. 
a(n) 
5. The digital signal in illustration C is an example of the 5; 
digital encoding scheme. 
6. An encoding scheme characterized by a digital pulse 6. 
transitioning during the midpoint of the time period is ____. 
7. No reference signal is used when transmitting data with ie 
transmission. 
8. A reference signal is used when transmitting data with 8. 
——— transmission. 
9. A(n) uses complicated mathematical algorithms to 9. 
determine if one or more bits are corrupt. 
10. A(m) is a simple method of verifying the integrity of 10. 


transmitted data. 


Practice 5.2 


Arrange the data packaging terms in the order of process, from raw data to data transmission. 


binary code digital signal frame packet 


segments 


SU pan a O 
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Name 


Practice 5.3 
Match the term to its definition. 


de 


2 
3I 
4 


circuit switching 


a. 
connection-oriented communication 
connectionless communication b. 
packet switching 

a 

d. 


Practice 5.4 
Identify the technologies as circuit switching (CS) or packet switching (PS). 


1 


2 
3 
4. 
5 
6 
7 


us ANN 
Ethernet 
.— FDDI 


Frame Relay 


T- DSE 
T ISDN 
ese T 


Practice 5.5 
Fill in the blanks for the statements about data codes. 


A type of communication in which a connection 
is first established between the source and 
destination computers before data is transmitted. 
A type of communication in which data is 
transmitted to the destination without first 
establishing a connection. 

A type of transmission that establishes a 
permanent connection between two points for 
the duration of the data transfer period. 

A type of transmission that does not use a 
permanent connection between two points for the 
duration of the data transfer period. Packets may 
travel different routes to the same destination. 


ASCII BCD 


EBCDIC 


HTML Unicode 
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used widely on IBM mainframes. 
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. The number 239 represented as 0010 0011 1001 in binary is ile 
an example of 

ele character code uses 16 bits to represent 2i 
individual characters. 

. The character code that uses 8 bits to represent 3. 
alphanumeric characters is 

is an authoring language used to create documents 4. 

that can be downloaded from the Internet and viewed by 
a Web browser. 

. The IBM character code is similar to ASCII and is 5. 


39 


Practice 5.6 
Match the frame type to its definition. 


de broadcast frame a. A frame intended for every computer on the network. 

2. E e . Aframe intended for one computer on the network. 
c. A frame intended for a preselected number of 

3. ______ unicast frame computers. 


Practice 5.7 
Match the OSI model layer to its function. 


1 application a. Converts frames or packets into electronic signals 
2 presentation and places them on the network media. 
b. Packages data into a universally agreed on form. 
3 session c. Ensures accurate delivery. 
4. transport d. Interfaces to the network system. 
e. The network media. 
5 network f. Encapsulates packets for routing. 
6 data link — g. Establishes and coordinates communications 
between two points. 
= physical 
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Network Operating 


Name Date 
Period 


Systems and Network 


Communications 


Introduction 


For the Network+ Certification exam, you should be able to identify the protocols that operate at the 
data link layer. You should also be able to identify and describe the access method used by Ethernet. 


Practice 6.1 


Fill in the blanks for the statements about user interfaces. 


crosoft Windows [Version 6.0.6002] 
opyright (c) 2886 Microsoft Corporation. 


¿¡NlsersNAdministrator> 


@11 rights reserved. 


command prompt command syntax graphical user interface (GUI) 


1. Illustration A is an example of a ; i 


2. Illustration B is an example of a 


3. The correct manner and arrangement in which a 
command is to be typed is called a 
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Practice 6.2 
Label the layers of the OSI model. 


ALLL 


Practice 6.3 


Place a check mark next to the protocols that operate at the data link layer. 


1. — — Ethernet 
2. — SMB 

3. A Token Ring 
fa UDP 

5. ____ ATM 

© — IKOR 

ne — AFP 

OTNES 

g; Token Bus 
105==3DSIS 

dde NetBIOS 
12. ——— ARCnet 
BE 
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Name 


Practice 6.4 


Fill in the blanks for the statements about Ethernet. The following terms may be used more than once. 
a A ee A ae 


access method broadcast storm 


collision domain segmenting 


aaa aaam 


i 


avoid collisions is called ____ 


Practice 6.5 


Match the Token Ring term to its definition. 
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active monitor 


beaconing 


loopback test 


1 
2 
3 
4. __ monitor contention 
a: 
6 
7 
8 


ring polling 


ring purge 


—— standby monitor 


token 


A(n) is a method of gaining access to the network 1. 
media. 

. CSMA/CD is an example of a(n) and is used by Ze 
Ethernet. 

. A(n) occurs when a network is flooded with a Sk 
continuous number of collisions and rebroadcasts. 

. The section of a network where collisions occur is referred 4. 
to as a(n) 

. The act of dividing a network into smaller sections to 5. 


The process of selecting an active monitor. 

A computer on a Token Ring network that can 
become an active monitor if the current active 
monitor fails or logs off the network. 

A signal that tests the network interface card to 
ensure that it is functioning properly. 

A short binary code that is passed to computers on a 
ring topology and, in some cases, a bus topology. 
A ring poll conducted by an active monitor to 
identify if a computer has logged on or off the ring. 
Removing a defective token and replacing it with a 
new one. 

A computer that is responsible for monitoring the 
necessary administrative functions associated with 
Token Ring technology. 

A recovery process used when a hardware failure 
occurs on the ring. 
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Practice 6.6 


Record the access method for the following network technologies. The following terms may be used 


more than once. 
E eee 


CSMA/CA CSMA/CD token passing 
ST ee 


. AppleTalk: 
. ARCnet: 
. Ethernet: 


. Token Bus: 
. Token Ring: 


oO fF WwW N = 


Practice 6.7 
Match the network technology to its token passing method. 


AA RE TEE a. The token is passed around the network to the 
2 ES next downstream neighbor. Before a computer can 
i transmit information on the network, it must seize a 
3 Token Ring token to take control of the network. 
b. The token is passed around the network according 
to a database of sequential MAC addresses. The 
token can also have a priority code set to allow a 
specific workstation to have the token before any of 
the other workstations. 
c. Uses a deterministic method of cable access by passing 
the token to the next highest assigned node number. 


Practice 6.8 
Fill in the blanks for the statements about NetBIOS. 


datagram de facto standard 
dumb terminal NetBIOS Name Server (NBNS) 
session Universal Naming Convention (UNC) 


virtual circuit 


1. Before NetBIOS, the traditional method of networking le 
was connecting a to a mainframe via cabling. 

2. A is a standard developed because of its widely 2 
accepted use in industry. 

3. A is a short message block that can be sent to a 3 


particular computer, sent to a group of computers, or 
broadcast to all computers connected to the media. 
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Name 


4. When communication is limited to two particular 4. 
computers, it is referred to as a 

5. When computers establish a session, they create a 3. 
connection-oriented communication known as a 

6. A resolves NetBIOS computer names to IPv4 6. 
addresses. 

7. NetBIOS uses a standard naming convention called _—. 7. 


Practice 6.9 
Match the discovery protocol to its definition. 


1. _____ Address Resolution Protocol (ARP) a. 

2 Cisco Discovery Protocol (CDP) 

3. ————Link-Layer Discovery Protocol (LLDP) b. 

4 Link-Layer Discovery Protocol-Media i 
Endpoint Discovery (LLDP-MED) 

5. ————Link-Layer Topology Discovery (LLTD) 

6. — — Link-Local Multicast Name Resolution 
(LLMNR) c 


An enhanced version of LLDP used for 
routers, switches, VoIP devices, and 
PoE devices. 

Microsoft's version of LLDP. 

A service that resolves IP addresses to 
MAC addresses. 

A protocol developed as an IEEE 
specification that identifies devices 
connected on the LAN. 

A variation of LLDP designed to 
support equipment such as Cisco 
routers, switches, and telephones. 

A protocol that serves the same 
function as a DNS server when a DNS 
server cannot be reached. It resolves 
names of devices connected collectively 
on a local network. 
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Microsoft Network 
Operating Systems 


Introduction 


For the Network+ Certification exam, you will not need to know specifics about Windows Server 
operating systems. However, you may be asked general questions about user accounts, user logon, 
and resource sharing. You will also be asked a question about the Lightweight Directory Access 
Protocol (LDAP). 


Practice 7.1 


Fill in the blanks for the statements about the Microsoft network models in illustrations A and B. 
The following terms may be used more than once. 


domain workgroup 


Printer 


Equipment Computer Computer 


A B 


1. The Microsoft network model in illustration A is an 1. 
example of a , which consists of a collection of users 
and equipment under one administration. 


2. The Microsoft network model in illustration B is an 2 
example of a , which is a group of computers that 
share resources. 
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10. 


db 


A 


. Computers in a peer-to-peer network are grouped 


togetherina__— 


. Computers in a Windows client/server network are 


grouped together in a 


is a group of computers that share resources such 
as files and hardware. 


. A____ isa logical grouping of users and equipment as 


defined by the network administrator. 


. In the model, each computer contains its own 
database of users. 

. In the ____ model, members share a common security 
database. 

. Inthe model, each user must have a separate 


account on each computer to use the computer’s shared 
resources. 


The model is limited in scope and is not used for 
large networks. 


The model makes it easier to manage a large 
number of users. 


Practice 7.2 


Identify the network characteristics as belonging to a domain (D), workgroup (W), or HomeGroup (HG). 
Some characteristics have more than one answer. 


ile 


No) 


48 


ae ie ef 


_____ Client /server configuration. 


Peer-to-peer configuration. 


Each computer has a set of user accounts. 


____ User accounts are stored in a single location. 


Passwords are optional. 


Passwords are required. 


___— All computers must be on the same LAN or subnet. 


Must be a Windows 7 computer with the network 
location set to Home. 


. ——— Membership is not limited to a subnet or LAN. 
10. 
INE 


———— Typically contains 10 to 20 computers. 


____ Can contain thousands of computers. 


Networking Fundamentals Study Guide 


10. 


We 


dile 


o CuS y> 
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Name 


Practice 7.3 


Fill in the blanks for the statements about accounts. 


(II Í a_ a OO 


auditing global security policy group account 
local security policy logon right network share 
permission security policy user account 


1. The basic requirement for a(n) is a user name and 1. 
password. 

Ze PA) is the ability to log on to the network. 

SAA) is the ability to access a network share. 

4. A(n) is a collection of users who typically share a 4. 
common job-oriented goal or similar function. 

5. A(n) is a blanket policy that secures resources on the 5, 
network. 

6. A(n) is a security policy that affects local users. 6. 

ZA) is a security policy that affects domain users. 7: 


8. A service that tracks the events, use, and access of network 8. 
resources and writes these actions to a log is called 


9. A(n) is a resource on the network that is shared 9, 
among assigned users. 


Practice 7.4 
Identify the file sharing protocols as belonging to CIFS, SMB, or NFS. 
1. 


Supports file sharing from a Windows operating ¡E 
system. 


Supports file sharing from UNIX and Linux 
operating systems. 


3. ——— A dialect of SMB. 
Mistakenly referred to as CIES. 


: An attempt by Microsoft to standardize a universal a 
file sharing protocol for the Internet to be used by all 
operating systems. 


Practice 7.5 


Record the maximum partition size for each file system. 


1. FAT16 ig 
2. FAT32 - 
3. NTFS a 
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Practice 7.6 
Identify the network characteristics as belonging to share-level (5) or user-level (U) security. 


de 


NOD 0 PF WN 


. 


— — Applies only to shares accessed over the network. 


Does not secure shares accessed locally. 


. ——— FAT16 and FAT32 allows only for this type of security. 


Secures shares locally and across the network. 


Commonly called NTFS permissions. 


Practice 7.7 


Fill in the blanks for the statements about Active Directory. The following terms may be used more 


than once. 
distinguished name | contiguous namespace 
forest namespace 
organizational unit tree 
1. A(n) is any physical or logical unit that is defined as 


50 


part of the network. 


. A user, group, printer, volume, directory, or service is an 


. A(n) 


. A(n) 


example of a domain 


is a collection of domains that share a common 
root domain name and Active Directory database. 


is a collection of domain trees that share a 
common Active Directory database. 


. The label that identifies a unique location in a structure 


such as the Internet is called a(n) 


. Chicago.XYZcorp.com and Dallas.XYZcorp.com share 


a(n) 


. Chicago.XYZcorp.com and Chicago.DEF.com share a(n) 


. A(n) 


within the same forest. 


is a container that holds objects or other 
organizational units and is used to organize a network 
into manageable units. 


. CN=jsmith, OU=Accounting, DC=Chicago.XYZcorp.com is 


an example of a(n) 
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Can be applied to both the directory level and file level. 


Requires a user to authenticate through a security database. 


disjointed namespace 


object 
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Name 


Practice 7.8 


Use the diagram of the Active Directory to write a distinguished name for each of the given names. 
Use the following attributes within each name: CN, OU, and DC. 


Root domain name 


XYZcorp.com 


Domain 


Chicago 


| Organizational Unit | Organizational Unit | 


| Organizational Unit 


Warehouse 


Object -> Object 
jkeltner mhart 
Object 
| rroberts 


Accounting Administration 


Object 
pwillson 
| Object 
senglewood 
Object 
| Laserjet1_Acc 


Object Object 

nmager bhalley 

Object | Object 
Laserjetl_Adm Laserjet1_Wrhs 


Object 
Laserjet2_Adm 


eae 


1. jsmith: 


2. rroberts: 


5. bhalley: 


S mmm 
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Practice 7.9 


Fill in the blanks for the statements about authentication and replication. The following terms may ¢ 
be used more than once. 


interactive logon multimaster replication network authentication 

1. Ina Windows 2000/2003 /2008 network, authentication de 

occurs during two types of processes: and 
2. The authentication process in which the user is verified 2 

and given access to the Active Directory is called 
3. An authentication process that occurs when a user 3. 

accesses a resource is called 
4. The Windows 2000/2003/2008 environment uses a a 


process called to replicate the security database. 


5. In the model, when changes are made to the 5i 
security database at a domain controller, the changes are 
replicated to the other domain controllers. 


Practice 7.10 


Identify the server roles that can be used in each version of Windows. The following terms may be 
used more than once, and each entry may have more than one answer. 0 


backup domain controller (BDC) domain controller (DC) 
member server primary domain controller (PDC) 


stand-alone server 


1. Windows NT: 


2. Windows 2000/2003 /2008:: 
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Name 


Practice 7.11 


Label the following NT domain trust relationships. 


complex trust one-way trust two-way trust 


Trusted domain Trusting domain 


Domain B trusts 


Domain A 
Domain A 


does not trust 
Domain B 


Domain A Domain B 


Trusted domain Trusting domain 


Domain B trusts 


Domain A trusts 
Domain A 


Domain B 


Domain B 


Trusting domain Trusted domain 


Domain A 


Domain C 
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Practice 7.12 


Match the domain trust relationship term to its definition. 


A relationship between domains that allows users 
from one domain to access resources on another 
domain in which they do not have a user account. 

A trust relationship in which both domains are 
designated as a trusted domain and a trusting domain. 
A trust relationship in which more than two domains 
have a full-trust relationship. 

Another name for a two-way trust relationship. 
Allows the trusted domain to access its resources. 
Allowed to access resources on a trusting domain. 

A trust relationship in which one domain is the 
trusted domain and the other is the trusting domain. 
A trust relationship between a Windows Server 2008 
domain and a non-Windows domain. 

A trust relationship between Windows Server 2008 
computer and an older Windows Server operating 
system or with another Windows Server 2008 that is 
located in a separate forest. 

A two-way trust that is designed to share resources 
between two forests. 


An area of the hard disk drive that is to be allocated 
to an operating system. 

An accessible unit of hard disk drive space as seen 
through the Windows interface, such as Windows 
Explorer. 

A partition that stores a bootable copy of an 
operating system. 

The space on a hard disk drive that has not been 
partitioned. 

A volume that consists of partitions from two or 
more hard disk drives. 

A partition that can contain one or more logical drives. 
Only one of these can exist on a hard disk drive. 


íl complex trust relationship a. 
2 external trust 
3. forest trust b. 
4. ——— full-trust relationship 
5. ——— one-way trust relationship j 
6. realm trust d. 
7. ———— trusted domain ‘i 
8. ——— trusting domain 5: 
9. ——— trust relationship ne 
10. _____ two-way trust relationship l 
i 
jle 
Practice 7.13 
Match the disk management term to its definition. 
T. extended partition a. 
px free space b. 
3. logical drive 
4. partition 
5. ——— primary partition A 
6. volume d. 
ie volume set x 
fe 
g. 
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A partition on a hard disk drive that is assigned a 
drive letter. 
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Na me D ate 
Period 


UNIX/Linux Operating 
Systems 


Introduction 


For the Network+ Certification exam, you do not need to know any specifics about the UNIX/Linux 
operating system. However, you should be familiar with the ifconfig, mtr, dig, and traceroute commands. 


Practice 8.1 


Fill in the blanks for the statements about the UNIX/Linux operating system. The following terms 
may be used more than once. 


boot loader daemon kernel 


module session shell 


1. A small program called a is used to expand the 1. 
kernel and to allow for flexibility. 


2. The core of an operating system is called a pa 

3. A hardware driver or kernel enhancement is referred to as 
a 

4. A is a program that runs in the background and 4. 
waits for a client to request its services. 

5. The Simple Mail Transfer Protocol is an example of a 5? 

6. A is a user interface that interprets and carries out 6. 
commands from the user. 

7. Bash and tcsh are examples of a : 7. 


8. LILO and GRUB are examples of a 


9. A program that starts the operating system load process is gl 
called a 


10. A 


is a logical connection with the Linux computer. 10. 
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Practice 8.2 
Label the parts of the directory listing. 


file or directory owner file or directory size file type 
owner's group permissions 
d. 
e: e. 
b. 
1094-10-28 01:25 bin 
04-10-28 05:25 
2004-12-06 003 
0:55 
a. 


4 root 
č q t 
5. root 
4 root 
2 root 
3 root 
4 root: 
8 root 
OXUXIUXIYWt root 
OXUXI-XE-35 root 
druxr-xi ? root 
OXWUXI-xE-X 3. root 
jkeltnerBlimux; /> | 


Practice 8.3 
Match the UNIX/Linux command to its definition. 


1 cd <directory> a. 
2 cp <filename> <directory> z 
3. ls d. 
4. ——— mv <filename> <new filename> À 
5. ——— pwd g. 
6 rm <filename> 

7 rmdir <directory> 
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Renames a file. 

Changes the directory to the specified directory. 
Removes (deletes) a file. 

Displays the path of the current working directory. 
Removes (deletes) a directory. 

Lists the contents of the current working directory. 
Copies a file to a specified directory. 


2004-11-12 
2004-06-30 4 


8 2004-06-30 


2004-10-28 01:44 


9 2004-1 


2004-12-08 001 


2004-10-26 


} 2004-1 


2004-10-28 b; 
2 2004-10-28 61: 
6 2004-10-28 


0. 2004-10-26 Olr 
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Practice 8.4 


Name 


Fill in the blanks for the statements about Linux file systems. The following terms may be used 


more than once. 


inode journaling file system journal file 

1. A(n) ensures file integrity whenever an unexpected if 

system shutdown occurs. 
2. Information about each file in a Linux system is stored in 2, 

a(n) 
3. Ajournaling file system maintains a(n) , or a log of 3! 

all file activity. 
4. A(n) is a table entry that contains information such 4. 


as permissions, file size, and the name of the file owner. 


5. Ext3 is an example of a(n) 


Practice 8.5 


Label the parts of the /etc/fstab file. 


device file 


Practice 8.6 


file system 


mount point options 


11 
S,umask=0002,10charset=utfs 0 0 


Match the storage device name to its description. 


TE sda 
2a hdd 
3. sdb 
4, de 
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ao op 


Second SCSI drive in a chain. 

Slave hard drive on secondary controller. 

Master or single hard drive on secondary controller. 
First SCSI drive in chain. 
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Practice 8.7 
Label the directory and file rights with the name of the owner of each group of rights. F 


group other user 


rwx rWX rWX 


Practice 8.8 


Determine (put a check mark by) the permissions for user, group, and other for each set of 
assigned rights. 


1. rw-r—r— 
User Group Other 
read E o o o co read 
Wans NES Write = ee write 
DER execute Onn execute 
2. rwxrwxr— 
User Group Other 
read ASA read me E en read 
Wi —— AE A Write n nS write 
ecc executo poe. A execute 
3. rw-rw——— 
User Group Other 
read — read — ~ read 
write —— wite T AS write 
execcuier E execute ==” execute 
4. rwxr-xr— 
User Group Other 
read e a read —— o read 
write — VA AAA write 
execute = -= execute m om execute 
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Name 


5. rw r— 
User Group Other 
fad read read 
write ___ write ee write 
eel — S execute T nT k execute 


Practice 8.9 


Fill in the blanks for the statements about UNIX/Linux authentication. 


/ /etc/passwd /root 
password root user name 
1. To log on to a UNIX/Linux system, a user must supply a k 
followed by a : 
2. The highest level of administration is the superuser, which 2 
has the default user account name of —___ l 
Sle directory is the home directory of the superuser. 
4. The directory is the highest level of the directory 4. 
structure. 
5. When a user is authenticated, the user’s user name and 5. 
password are compared to account information stored in 
the file. 
Practice 8.10 
Fill in the associated protocol for each UNIX/Linux file and print service. 
IBP Ipr NFS SMB 
1. SAMBA: 
2. UNIX/Linux file services: 
3. CUES: 
4. Ipd: 
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Practice 8.11 


Fill in the blanks for the statements about UNIX/Linux file and print services. F 
Common UNIX Printing System (CUPS) export 
line printer daemon (Ipd) lpr 
mount Network File System (NFS) 
1. File sharing is made possible through the protocol. i; 
2. To make files and directories accessible to remote users, 2. 
the administrator must the files and directories. 
3. To view the exported directories, a user at the client 3 
computer must the directory. 
4. The ___ handles remote and local printing services. 
5. The command is used to send print jobs to the line 5i 
printer daemon (lpd). 
6. has been designed to support network printing 6. 


using the Internet Printing Protocol (IPP). 
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Name___ _—_—_— D 
Period 


Introduction to the 
Server 


Introduction 


For the Network+ Certification exam, you should be able to identify the basic characteristics 
of RAID and storage systems. CompTIA also expects you to have A+ Certification knowledge. 
Therefore, itis a good idea to review the system resources covered in this chapter. 


Practice 9.1 
Fill in the blanks for the statements about server types. 


blade server thin client thin client server thin server 
ETA relies on a thin client server’s processing power Íl- 
and memory. 
ZA is a powerful server that is extremely thin. 2. 
3. A server that has only the hardware and software needed gl 


to support and run a specific function is called a 


4. Aserver that provides applications and processing power 4. 
to a thin client is called a 


Practice 9.2 


Fill in the blanks for the statements about server hardware. 


backplane firmware 

hot swapping hot-swap technology 
logical unit number (LUN) parallel processing 
power-on self-test (POST) serial attached SCSI (SAS) 


Small Computer Systems Interface (SCSI) 


1. ASCSI technology that transfers data in a serial fashion is ds 


2. The computer bus technology that allows you to connect de 
multiple devices to a single controller is 
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She is a numbering scheme used to identify SCSI de 
devices attached to an extender card. 


4. A is a simple motherboard that serves as the 4. 
interface of all major components. 


5. Processing a program through more than one CPU 5! 
simultaneously is referred to as 


6. The combination of a BIOS chip and the software program 6. 
within the chip is called 


7. A technology that allows a component to be removed or 7, 
installed while the system is running is referred to as 
8. The is a BIOS routine that performs a series of 8. 


hardware checks to determine if the computer is in 
minimal working order. 


9. The process of removing components without shutting 9. 
down the system is called 


Practice 9.3 
Interpret the SCSI binary patterns. 


Connection —>| D 
pins 


Practice 9.4 


Fill in the blanks for the statements about system resources. The following terms may be used more 
than once. | 


DMA I/O port IRQ memory address assignment 
1. A(n) is a circuit that communicates with the CPU. le 
2. A(n) channel is a circuit that allows devices to 2. 


communicate and transfer data to and from RAM without 
the need of CPU intervention. 
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Name 


3. The is a small amount of memory assigned to a 3. 
device that temporarily holds small amounts of data. Itis 
used to transfer data between two locations. 


4. A(n) conflict can lead to problems such as an 4. 
inoperable device, a system crash, and a system lockup. 
5. A(n) is a large block of memory assigned to a device 5i 


and is used to transfer data between two locations. 


6. Large blocks of data that need to be transferred between 6. 
hardware devices and memory are transferred through 
a(n) channel that is assigned to the device. 


7. Hardware devices send an electrical signal to the CPU de 
using an assigned circuit. 


Practice 9.5 
Fill in the blanks for the statements about RATD technology. The following terms may be used more 


than once. 
disk mirroring disk striping duplexing 
error correction fault tolerance parity 
Redundant Array of Independent Disks (RAID) 


1. A(n) is a system of disks arranged for speed or fault 1. 
tolerance, or both. 


2. A system’s ability to recover from a hard disk or hard 2: 
disk controller failure without the loss of stored data is 
called x 


3. Dividing data into sections and writing the data across 3. 
several hard disk drives at the same time is called 


4. The total data pattern shared between the data storage 4. 
drives is represented by a binary code known as alt 
any data storage drive fails, the system can use the parity 
bit to rebuild the missing data. 


5. The technique of placing each mirrored hard drive on a 5i 
separate hard disk drive controller is called 


6. The act of writing the same information to two hard disk 6. 
drives at the same time is called 


7. The RAID technique 
code (ECC) or parity. 


uses traditional error-checking Ik 
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Practice 9.6 
Label the RAID technologies. 


RAID 0 RAID 0/1 or RAID 10 RAID 0/5 or RAID 50 
RAID 1 RAID 1 with duplexing RAID 5 

a. d. 

110100100101010101010101001010010101010 110100110100110100110100 


LOLL 


= S = E Same z | 
Ə z = = data : 


EE P y Writes the same information to two hard 
Data Parity Dala disk drives at the same time. 


Distributes parity and data 
accross all drives 


p: i e. 


110100100101010101010101001010010101010 


(Same data > Y ————___ Y | a a 


Uses only disk striping accross a group Uses multiple mirrored disk sets and 
of independant drives. incorporates disk striping. 


= fai a RAID gal 


Uses several RAID 5 (block striping with parity) sets 
alar = and combines them with RAID 0 (disk striping). 


Places each mirrored drive set ona 
separate hard disk drive controller. 
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Name 


Practice 9.7 


Fill in the blanks for the statements about the storage systems in illustrations A and B. 


network attached storage (NAS) storage area network (SAN) 


Disk or tape 
storage array 


Network 
server 


A 
XYZ corporation LAN 
University WAN 
Fibre Channel switch 
ABC corporation LAN 
B Storage facility 
1. The storage system in illustration A is an example of la 
2. 


2. The storage system in illustration B is an example of 
3. A device or collection of devices that provide storage for a 
single network is called 


4. A is a separate, high-speed network that provides a 4. 
storage facility for one or more networks. 


5. A— — uses a high-speed access media such as Fibre Channel. 5. 


Copyright by Goodheart-Willcox Co., Inc. Chapter 9 Introduction to the Server 65 


Practice 9.8 
Fill in the blanks for the statements about the Fibre Channel topologies in illustrations A, B, and C. 


arbitrated loop fabric switched 


point-to-point 


66 


. Ina(n) 


. A Fibre Channel 


. The 


. The 


Channel 


(E Station1 


. The Fibre Channel topology in illustration A is an example 


of E 

. The Fibre Channel topology in illustration B is an example 
of 

. The Fibre Channel topology in illustration C is an example 
of 

. In a(n) Fibre Channel topology, when two points 


wish to communicate, a private link, or channel, is set up 
between the two devices. 


Fibre Channel topology, two devices set up a 
direct communication link, or channel, for the duration of 
the data transfer. 


topology is simply a straight 
connection or channel between two points, such as a 
mainframe and a server. 


Fibre Channel topology uses a device known as 
a fabric switch. 


Fibre Channel topology is limited to 127 connections. 
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Name Date 
Period 


TCP/IP Fundamentals 


Introduction 


For the Network+ Certification exam, you should be able to identify IPv4 and IPv6 address formats 
and know the function of the following addressing technologies: DHCP, DNS, and NAT. You should 
also be able to identify port numbers by their related service and identify the function of common 
TCP/IP troubleshooting utilities. 


Practice 10.1 


Record the range and subnet mask of public IP addresses by class. 


Public IP Addresses 


Range Subnet Mask 


Practice 10.2 


Record the class (A, B, or C) and subnet mask of each of the following IP addresses. 


127030253: 
"1801274815: 
192691128169: 
1505191745200: 


A A o >> A 


. 221.90.88.16: 
-1903516590 
. 126.100.59.3: 


o N A OF A Q N 
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9, 130.49.200.22: 
10. 168.10:1085: 

11. 196.52.60.45: f 
12. 140.223.190.25: 
(865222 16425:65: 
14. 127.191.65.120: 
e191 16.20.90: 


Practice 10.3 


Record the range and subnet mask of reserved IP addresses by class. 


Reserved (Private) IP Addresses 


Subnet Mask 


Practice 10.4 
Identify (place a check mark by) the private IP addresses. 


a 025305 

Za 10.102 

SA 2 93 16:00 
4. —— — 192.168.88.92 

SSe? 167222.13 

6 172.29 4524 

7. — 10.33.214.160 

8.) OOS 

9 2S 82263 
10, 2 192658200142 
¡MAA 26:20:20 
72 19:92 101 
0 127.192: 117 
A 1924169. 10:25 
O? 168.50.16 
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Name 


Practice 10.5 


Record the class, range, and subnet mask of Automatic Private IP Addressing (APIPA) addresses. 


APIPA IP Addresses 


Subnet Mask 


Practice 10.6 
Fill in the blanks for the statements about IPv4 addressing. 


default gateway address host octet 
subnet mask subnetwork 
1. A(n) , or node, is a device associated with an IP iL. 
address on a TCP/IP network. 
2. Anetwork within a network is known as a(n) : 2 
3. An eight-bit, or one-byte, value is a(n) : 
4. A(n) is the address of the computer that provides a 4. 
connection to the Internet. 
5. A number similar to an IP address used to determine to 5: 
which subnetwork a particular IPv4 address belongs is 
a(n) 


Practice 10.7 


Fill in the blanks for the statements about Internet assigned names and numbers. 


Integrated Network Information Center (InterNIC) 


Internet Corporation for Assigned Names and Numbers (ICANN) registrar 
1. A(n) is a select, private company that is assigned a îl. 
pool of IP addresses from ICANN and handles domain 
registration. 
2 MBE is a company that manages domain name 2 


registration by allocating domain name registration to 
select, private companies. 


3. The is a branch of the United States government 2! 
under the direction of the Department of Commerce that 
was responsible for regulating the Internet, overseeing the 
issue of domain names, and assigning IP addresses to them. 
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Practice 10.8 


Fill in the blanks for the statements about DNS structure and operation. 
A A A A A U a 


Fully Qualified Domain Name (FDQN) 


subdomain 
sar ee a a a al 


. A combination of a host name and a domain name, such 
as station12.xyzcorp.com, is called a 


. Ina DNS structure, faculty.mit.edu would be referred to as 


. Ina DNS structure, .gov is referred to as a 


a 


. The 


. Ina DNS structure, mit.edu would be referred to as a 


address. 


Practice 10.9 


Match the network service to its definition. 


70 


TA 0 Pp ON => 


. 


. — Address Resolution Protocol (ARP) 


Bootstrap Protocol (BOOTP) 
Domain Name System (DNS) 


. ——— Dynamic Host Configuration Protocol (DHCP) 


Network Address Translation (NAT) 


Reverse Address Resolution Protocol (RARP) 
——— Windows Internet Naming Service (WINS) 
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is a software program located on a host that 
queries a DNS server to resolve a host name to an IP 


second-level domain 


top-level domain 


i 
2 


Z 


A protocol that translates private 
network addresses into an assigned 
Internet address, and vice versa. 
In other words, it allows an 
unregistered private network 
address to communicate with a 
legally registered IP address. 

A service that resolves IP addresses 
to MAC addresses. 

A system that associates a host or 
domain name with an IP address, 
making it easy to identify and find 
hosts and networks. 

A service that resolves NetBIOS 
names to IP addresses. 

A service that assigns IP addresses 
automatically to the hosts on a 
network. 

A service that finds the MAC 
address of a host when the IP 
address is known. 

A service that uses a centralized 
database of the MAC addresses 
and IP assignments of all devices 
on the network and assigns the 
appropriate IP address to a host 
when it boots. 
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Name 


Practice 10.10 


Match the IP addressing method to its definition. 


1. ____ dynamic addressing a. Automatically assigning IP addresses. 
: ; b. An IP address that is entered manually for each host 
dl IP a 
+ assignment Othe renter 
3. static addressing c. Assigning an IP address manually. 
4. static IP assignment d. An IP address that is issued automatically, typically 


when the computer boots and joins the network. 
Practice 10.11 
Fill in the blanks for the statements about TCP/IP ports and sockets. 


port number socket 


upper-level port numbers well-known port numbers 


. The address 192.168.20.45:80 is an example of a(n) ——. 
. Ports 1024 and higher are referred to as 


. Ports 0 through 1023 are referred to as 


e V N e 
a 


A number associated with the TCP/IP protocol and used 
to create a virtual connection between two computers 
running TCP/IP is called a(n) 


. 
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Practice 10.12 


Record the port number of the commonly used services and protocols. 


Service or Protocol Port Number 


FTP 
ETE 
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Name 


Practice 10.13 

Identify the characteristics as belonging to IPv4 or IPv6. 
1. — Uses Address Resolution Protocol (ARP). 

Uses the Neighbor Discovery protocol. 


—— IPSec for security is mandatory. 
——— IPSec for security is optional. 
—__— 128-bit addresses. 


——— 4-digit hexadecimal numbers divided by colons. 


4 octets separated by periods. 


Uses Type of Services (TOS) field in header plus UDP and TCP packets to deliver 
time-sensitive data. 


SNA TF WN 


so 


——— Improved quality of service. 


10. _____ Contains header information that allows routers to immediately identify the packet priority. 


Practice 10.14 
Identify the characteristics as belonging to a MAC address (MAC) or and EUI-64 identifier (EUD). 


1. _____ 24-bit manufacturer’s ID and 24-bit unique identifier. 

2. _____ 24-bit manufacturer’s ID and 40-bit unique ID. 

3. ———— Modified to fit inside a 64-bit frame. 

4, ____ Randomly generated in Windows Vista and later operating systems. 


Practice 10.15 
Label the network using IPv6 topography terminology. 


global link-local unique-local 
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Practice 10.16 


Match the IPv6 address classification to its definition. 


1. anycast address a. 
2 multicast address 
3. _____ unicast address c. 


Practice 10.17 


Delivers packets to the nearest interface and is used 
mainly for supporting router functions. 

Delivers packets to a single network address. 
Delivers packets to multiple addresses. 


Fill in the blanks for the statements about unicast addresses. The following terms may be used more 


than once. 
global unicast link-local unicast site-local unicast unique-local unicast 
1. A(n) address is similar to an IPv4 public address. ily 
2. The address is a replacement for site-local address. 2 
3. The address starts with 2000: or is written as 2000:/3. de 
4. The address starts with FE80 or FE80::/64. 4. 
5. The address starts with FCOO. 5. 
6. The address serves the same function as an IPv4 6. 
APIPA address. 
7. The address serves the same function as the site- Ta 
local address. 
8. The address serves the same function as the IPv4 8. 
private address 10.0.0.0, 172.16.0.0, and 192.168.0.0. 
9. The Network Discovery feature requires the address 2. 
to function. 
10. The address can represent the entire local area 10. 
network or just a portion. 
11. The scope of a(n) address is the entire Internet as 11. 


well as the local area network. 


Practice 10.18 


Record the IPv4 and IPv6 loopback addresses. 


1. IPv4 loopback address: 


2. IPv6 loopback address: 


Practice 10.19 


Record the IPv4 and IPv6 unspecified addresses. 


1. IPv4 unspecified address: 
2. IPv6 unspecified address: 


<——Á—ÁÁÓ— A A e e 


xáloo——-- 
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Name 


Practice 10.20 


Record the IPv4 and IPv6 multicast destination addresses. 


1. IPv4 multicast destination address: 


2. IPv6 multicast destination address: 


Practice 10.21 


Match the IPv6 transition technology to its definition. 


A o: a. Anode-to-node and node-to-router technology used 

2.  ISATAP for existing IPv4 network devices to eliminate the 
need to upgrade network devices. 

a Teredo b. A network address translator that creates a tunnel 
that allows incoming IPv6 traffic through a firewall 
designed for IPv4. 


c. An IPv6 transition mechanism that provides a means 
of communicating across the IPv4 Internet while 
preserving the original IPv6 assigned address of the 
network device. 


Practice 10.22 


Match the TCP/IP troubleshooting utility to its function. 


arp a. Displays current TCP/IP and port statistics. It can 
be used to determine network problems such as 
excessive broadcasts on the network. It also allows 
nbtstat the user to monitor network connections. 

Displays NetBIOS over TCP statistics. 


____ ipconfig 


SNA MF WN a 


ae c. Used to send a packet from one host to another on a 
nislookup network and then echo a return reply. Itis commonly 
ping used to quickly check the connection state of network 

media between two hosts. 

traceroute / tracert d. Used to troubleshoot a path to a distant destination. 

ifconfig This utility displays the approximate hop lapse times 


between points along the route. The amount of time 
delay can help analyze network failure or problems 
caused by excessive time delays. 

e. Lists IP addresses resolved to MAC addresses. It can 
be used to troubleshoot problems with multiple IP 
assignments and to solve host communication problems. 

f. Used to query domain servers when seeking 
information about domain names and IP addresses. 
This is a convenient tool when looking for information 
about a particular domain or IP addresses. 

g. Used to verify TCP/IP settings on a Windows XP and 
later computer. 

h. Used to verify TCP/IP settings on a UNIX/Linux 
computer. 
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Date 


Introduction 


For the Network+ Certification exam, you should be able to identify common routing protocols. 
CompTIA requires only that you be able to identify the purpose of subnetting. You will not be asked 
to perform subnet calculations. However, as a network technician or administrator, you should 

be able to convert binary to decimal, and vice versa. You should have some minimal practice in 
subnetting even though you will most likely use a subnet calculator. Working through some subnet 
exercises will give you a better understanding of the calculations derived from a subnet calculator. 


Practice 11.1 


Convert the binary numbers to decimal. Use the chart and the space beneath the chart to aid in 
conversion. The first practice has been completed for you. 


1. 11000000: 192 
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3. 10101000: 


4. 10101100: 


oe 11014114: 


78 Networking Fundamentals Study Guide 


Copyright by Goodheart-Willcox Co., Inc. 


Name 


6. 01001110: 


(25) 2) (ay 


32 16 8 


Practice 11.2 


Convert the decimal numbers to binary. Use the chart and the space beneath the chart to aid in 


conversion. The first practice has been completed for you. 


1. 167: 10100111 


The largest power of two decimal values that can go into 167 is 128. Place a 1 in the 128 position 
in the chart and then subtract 128 from 167. 


167 
- 128 


39 


The largest power of two decimal values that can go into 39 is 32. Place a 1 in the 32 position in 


the chart and then subtract 32 from 39. 
39 
- 32 
y 
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The largest power of two decimal values that can go into 7 is 4. Place a 1 in the 4 position in the 
chart and then subtract 4 from 7. 


7 ¢ 
- 4 
3 
The largest power of two decimal values that can go into 3 is 2. Place a 1 in the 2 position in the 
chart and then subtract 2 from 3. 
3 
- 2 
1 


The largest power of two decimal values that can go into 1 is 1. Place a 1 in the 1 position in the 
chart. Place a 0 in the empty positions to derive the complete eight bit binary address. 


PISTA 
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Name 


Wa aa 


4 


5. 204: 
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Practice 11.3 


Record the Class A, Class B, and Class C subnet mask in decimal and binary form. 


Decimal 


‘| J 


Practice 11.4 


Using an assigned IP address and required number of subnets, determine the new subnet mask, 
subnet network addresses, host ranges, and broadcast addresses. The first practice has been 
partially completed for you. 


Number of Number of 
Subnets Borrowed Bits 


Table 11-1. Class C network subnet values. 
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Name 


Assigned IP address: 192.212.14.35 


Number of subnets: 2 


Do not allow all 1s and all Os in the host address. 


Answers 
Read through the worked practice and then place the answers in this section when prompted. 


New subnet mask: 


1* Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


2"? Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


Worksheet 


Determine the Class of the Class C 


assigned IP address. 


The assigned IP address 
192.212.14.35 is a Class C 

address because the first octet is 
in the range of 192-223. 


Determine the assigned IP Subnet mask: 255.255.255.0 


address subnet mask. 


Since the assigned IP address is a 
Class C address, the subnet mask 
15125512552550 


Step3. Record the subnet mask in Subnet mask in binary form: 
binary form for the assigned 11111111.11111111.11111111.00000000 
address. 
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84 


Step 4. 


Networking Fundamentals Study Guide 


Determine the new subnet mask and 
record it in decimal form. (Refer to 
Table 11-1.) 


To determine the new subnet mask, 
borrow bits from the host portion of 
the original subnet mask to create the 
required number of subnets. In this 
example, two subnets are required. 
To create two subnets, two bits are 
borrowed from the host portion of the 
original subnet mask. 


Record the possible subnets created 
from the borrowed bits and allow for 
the reserved values of all ones and 
all zeros by crossing out the all Os 
and all 1s entries. Then, compute the 
host range for each allowable subnet. 


Notice that the 1 bit in the 01 subnet is ~ 


in the 64 decimal position. Therefore, the 
host range for that subnet begins with 
64. The rest of the bits, those in the host 
position, are added to this number to 
derive the end of the host range, 127. 


In the 10 subnet, the 1 bit is in the 128 
decimal position. The rest of the bits, those 
in the host position, are added to 128 to 
derive the end of the host range, 191. 


Record the network address for each 
subnet. 


The network address is created from the 
assigned network address and the first 
number in each host range of allowable 
subnet patterns (01 and 10). 


Original subnet mask: 


Borrowed bits 


11111111.11111111.11111111.11000000 
Decimal: 

259,255,255 192 

New subnet mask: 255.255.255.192 


(Record this number in the Answers section.) 


Borrowed bits/ 
possible subnets 


Host range 


128 64 32 
64-127 (0 1 1 
128 64 32 1 
128-191 (1 0 1 


Assigned network address: 
192.212.14.0 


First number in each host range: 


64 
128 


Subnet network address (for subnet 01): 
192.212.14.64 


(Record this number in the Answers section.) 


Subnet network address (for subnet 10): 
192.212.14.128 


(Record this number in the Answers section.) 
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Name 


Record a broadcast address for each 
subnet. 


The broadcast address is created using 
the assigned network address and 

the last number in each host range of 
allowable subnet patterns (01 and 10). 


Assigned network address: 
192.212.14.0 


First number in each host range: 

127 

191 

Broadcast address (for subnet 01): 
192 a7 


(Record this number in the Answers section.) 


Broadcast address (for subnet 10): 
192.212.14.191 


(Record this number in the Answers section.) 


Record the final host range for each 
subnet. 


The host range is created using the 
assigned network address and the 
remaining numbers in each host range of 
allowable subnet patterns (01 and 10). 
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Assigned network address: 
192.212.14.0 


Remaining numbers for subnet 01: 


65-126 


Host range (for subnet 01): 192.212.14.65- 
1922214 -126 


(Record this number in the Answers section.) 


Remaining numbers for subnet 10: 129-190 


Host range (for subnet 01): 192.212.14.129— 
192.212.14.190 


(Record this number in the Answers section.) 
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Given 


Assigned IP address: 212.45.67.82 
Number of subnets: 2 


Do not allow all 1s and all Os in the host address. 


Answers 


New subnet mask: 


1° Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


2"4 Subnet 
Subnet network address: 
Broadcast address: 


Host range: 


Worksheet 


Determine the Class of the 
assigned IP address. 


Determine the assigned IP Subnet mask: 


address subnet mask. 


Record the subnet mask in 
binary form for the assigned 
address. 


Subnet mask in binary form: 


Determine the new subnet 
mask and record it in decimal 
form. (Refer to Table 11-1.) 


Original subnet mask: 


Decimal: 


New subnet mask: 


(Record this number in the Answers section.) 
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Name 


Step 5. Record the possible subnets created Borrowed bits / Host ranges 
from the borrowed bits and allow for possible subnets 
the reserved values of all ones and 
all zeros by crossing out the all Os 
and all 1s entries. Then, compute the 


host range for each allowable subnet. prams oe l i ; E 


oi aaa A 1) 
Ei A ae | 

128 64 32 16 8 4 2 1 

10 ome ano fl ii i 


y a 


Step 6. Record the network address for each Assigned network address: 
ns 212.45.67.82 


Subnet network address for 1* subnet (subnet 01): 


(Record this number in the Answers section.) 


Subnet network address for 2"* subnet (subnet 10): 


(Record this number in the Answers section.) 


Step 7. Record a broadcast address for each Assigned network address: 
subnet. 212.45.67.82 


Broadcast address for 1* subnet (subnet 01): 


(Record this number in the Answers section.) 


Broadcast address for 2"* subnet (subnet 10): 


(Record this number in the Answers section.) 


Step 8. Record the final host range for each Assigned network address: 
eins 212.45.67.82 


Remaining numbers for subnet 01: 


Host range for 1* subnet (subnet 01): 


(Record this number in the Answers section.) 
Remaining numbers for subnet 10: 


Host range for 2™ subnet (subnet 01): 


(Record this number in the Answers section.) 
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Given 


Assigned 1P address: 195.200.86.64 
Number of subnets: 6 


Do not allow all 1s and all Os in the host address. 


Answers 


New subnet mask: 


1* Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


2"? Subnet 
Subnet network address: 
Broadcast address: 


Host range: 


3" Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


4* Subnet 
Subnet network address: 


Broadcast address: 


Host range: 


5 Subnet 


Subnet network address: 


Broadcast address: 


Host range: 


6% Subnet 


Subnet network address: 


Broadcast address: 


Host range: 
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Name 


Worksheet 


Determine the Class of the assigned Class: 
IP address. 


Determine the assigned IP address Subnet mask: 
subnet mask. 


Record the subnet mask in binary Subnet mask in binary form: 
form for the assigned address. 


Determine the new subnet mask and Original subnet mask: 
record it in decimal form. (Refer to 
Table 11-1.) 


Decimal: 


New subnet mask: 


(Record this number in the Answers section.) 


Record the possible subnets created Borrowed bits/ Host ranges 
from the borrowed bits and allow for possible subnets 

the reserved values of all ones and 

all zeros by crossing out the all Os 

and all 1s entries. Then, compute the 

host range for each allowable subnet. 
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Step 6. Record the network address for each Assigned network address: 
gabret. 195.200.86.64 ¢ 


Network address for 1* subnet: 


(Record this number in the Answers section.) 


Network address for 2™ subnet: 


(Record this number in the Answers section.) 


Network address for 3"* subnet: 


(Record this number in the Answers section.) 


Network address for 4'" subnet: 


(Record this number in the Answers section.) 


Network address for 5" subnet: 


(Record this number in the Answers section.) 


Network address for 6 subnet: 


(Record this number in the Answers section.) 


Step 7. Record a broadcast address for each Assigned network address: 
latte 195.200.86.64 


Broadcast address for 1* subnet: ¢ 


(Record this number in the Answers section.) 


Broadcast address for 2"* subnet: 


(Record this number in the Answers section.) 


Broadcast address for 3" subnet: 


(Record this number in the Answers section.) 


Broadcast address for 4 subnet: 


(Record this number in the Answers section.) 


Broadcast address for 5* subnet: 


(Record this number in the Answers section.) 


Broadcast address for 6* subnet: 


(Record this number in the Answers section.) 
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Name 


Step 8. Record the final host range for each Assigned network address: 
ans 195.200.86.64 


Remaining numbers for 1* subnet: 
Host range for 1* subnet : 


(Record this number in the Answers section.) 


Remaining numbers for 2" subnet: 
Host range for 2”* subnet : 


(Record this number in the Answers section.) 


Remaining numbers for 3"* subnet: 
Host range for 3™ subnet : 


(Record this number in the Answers section.) 


Remaining numbers for 4" subnet: 
Host range for 4" subnet : 


(Record this number in the Answers section.) 


Remaining numbers for 5 subnet: 
Host range for 5 subnet : 


(Record this number in the Answers section.) 


Remaining numbers for 6" subnet: 


Host range for 6™ subnet : 


(Record this number in the Answers section.) 
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Practice 11.5 


Identify the characteristics as belonging to a bridge (B), switch (5), or router (R). Some f 
characteristics can have more than one answer. 
il Segments the network at layer 2. 
2. Segments the network at layer 3. 
3. Segments the network at the network layer. 
4. Segments the network at the data link layer. 
5. ____. Makes decisions based on the source and destination IP addresses. 
6. Filters network traffic based on MAC addresses. 
de Used to reduce bandwidth. 
8. Used to create a VLAN. 
2. Designed with forwarding modes. 
10. Forwards broadcast frames. 
AT Does not forward broadcasts. 


Practice 11.6 


Match the switch forwarding mode to its definition. 


1. _____ adaptive cut-through a. A method of switching that checks the first 64 bytes 
2. rouch of an Ethernet frame before forwarding it. 
n b. A method of switching in which a switch operates 4 
3. fragment-free in cut-through mode by forwarding the frame 
4. cd immediately after receiving it until it detects an 


unacceptable number of corrupt frames. Then, it 
operates in the store-and-forward mode or fragment- 
free mode until the number of corrupt frames is 
reduced to an acceptable number. 

c. A method of switching that forwards the frame 
immediately after receiving it. 

d. A method of switching that reads the entire contents of 
the frame before forwarding the frame to its destination. 
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Name 


Practice 11.7 


Fill in the blanks for the statements about basic router terminology. 


convergence dynamic IP address table hop 
router metric routing static IP address table 
1. The process of selecting the best route to send packets de 
through a network is called — 
ZA is generated by a software program that 2 
communicates with nearby routers. 
3. A is a table of addresses that have been manually 3. 
entered. 
4. Ameasure of how many network devices (such as routers 4, 


and gateways) a packet must pass through until the 
packet reaches its destination is referred to as a 


5. Steady state, or , is the state in which all dynamic 5. 
routing tables contain the same information. 
Ga is the mechanism used to determine or measure 6. 


the best route. 


Practice 11.8 


Match the routing protocol classification to its definition. 


|; distance vector protocol a. A routing protocol that only transfers 
2 Exterior Gateway Protocol (EGP) information about connections and does not 
l pass its routing table to other devices. 
En Interior Gateway Protocol (IGP) b. A basic routing protocol that is confined to an 
T link state protocol autonomous network. 


c. A basic routing protocol that exchanges 
information between different autonomous 
networks. 

d. A routing protocol that shares its routing table 
with other routers. 
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Practice 11.9 


Identify (place a check mark by) the routing protocols that are classified as an Internet Gateway 
Protocol (IGP). 


ie 


2 
3 
4 
5 
6 
7 
8 


— BGP 
-REGE 
IGRE 
= IRGP 

2 SIS 
a OSL 
ome WI? 

. —— RIPng 


Practice 11.10 


Identify (place a check mark by) the routing protocols that are classified as an Exterior Gateway 
Protocol (EGP). 


îi 


ES 


> BGP 
EE EGP 
72 BIGRE 
ME IRC? 
NE BHS 
T- OSPE 
TRIP 
== RIPng 


Practice 11.11 


Identify (place a check mark by) the routing protocols that are classified as a link state protocol. 


1 


94 


AS or 3 0 NN 


¿A E 
ee EGE 
A a kag 


a (REP 
a 6-15 
ee OSRE 


oe RIP 


NA TUNE 
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Name 


Practice 11.12 


Identify (place a check mark by) the routing protocols that are classified as a distance vector protocol. 


1 
2 
3 
4 
5 
6 
7 
8 


i= BGE 

-m = FCP 
TE RP 
GP 
T 1515 
y OSPF 
IR 

a Nia 


Practice 11.13 


Match the VLAN term to its definition. 


no pon 


. — dynamic VLAN 

—— Spanning Tree Protocol (STP) 

static VLAN 

aa trunking 

. —— Virtual Local Area Network (VLAN) 
. ——— Virtual Trunking Protocol (VTP) 


Practice 11.14 


Derive CIDR from the subnet masks. 


E 


NO 0 5 05 OF => UN 


— 
= 
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255.255.254.0: 
. 254.0.0.0: 


The technique of connecting different VLANs 
together using a single network link. 

A layer 2 protocol designed to manage 
networks based on MAC addresses and to 
prevent bridge loops. 

Created when physical ports on a switch are 
manually assigned to a particular VLAN. 

A broadcast domain created by one or more 
switches based on logical (MAC) addresses. 
Created automatically using software by 
assigning the device MAC address and the 
user name toa VLAN. 

A proprietary protocol developed by Cisco 
Systems to provide automatic reconfiguration 
of multiple switches across an entire network. 


- 295.259.128:0: 


. 128.0.0.0: 


OS.) A AAA A A A A AA 2 


. 255:255:192.0: 


A a a aal a A l 
A AAA e S A 
A ee =¢țãå H oo 


_ 248.0.0.0; ____- SSeS 
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a TA ee 
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Name 


Date 


Period 


Introduction 


Multimedia 
Transmission 


For the Network+ Certification exam, you should be able to recall the purpose and characteristics of 
multimedia transmission protocols such as Frame Relay, ATM, VoIP, SIP, and RTP. 


Practice 12.1 


Match the audio and video signal term to its definition. 


il: acoustical echo a. 
2 bit rat 
it rate b. 
3. codec 
4. jitter r 
5 latency al 
6 = MPEG 
7. sampling frequency e. 
8. sampling rate 
fe 
g. 
h. 
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The number of times during a specific period that a 
sample of a signal’s amplitude is taken. 

The number of bits used to represent the amplitude 
of an analog signal. 

The number of times per second that a sample of a 
signal’s amplitude is taken. 

Small staggers or hesitations in the delivery 
sequence of audio or video data caused by latency 
or missing packets. 

Software, hardware, or a combination of software 
and hardware that compresses and decompresses 
video and audio information. 

A condition that takes place when a microphone 
and a speaker are in close proximity or the audio is 
improperly adjusted, causing feedback. 

An industry standard that ensures compatibility 
between different cameras, displays, and other 
multimedia equipment. 

The delay of data as it travels to its destination. 
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Practice 12.2 


Match the multimedia transmission protocol to its definition. 


E Asynchronous Transfer Mode (ATM) a. An Internet telephony protocol designed 

) for high-performance data delivery and 

i quality of service. It relies on existing 

3. ——— Voice over IP (VoIP) TCP/IP technology and existing TCP/IP 

4. x95 networking equipment. 

b. A packet switching protocol that typically 
uses leased lines such as T1 to carry data 
over long distances. 

c. Aprotocol that uses analog signals to 
transmit data across long distances. 

d. Aprotocol designed especially for 
transmitting data, voice, and video. 


Frame Relay 


Practice 12.3 

Identify the characteristics of a permanent virtual circuit (PVC) and Committed Information Rate (CIR). 
de 
23 
2: 


Guaranteed bandwidth a commercial carrier will provide a subscriber. 


Behaves like a hard-wired connection between the destination and source. 


It can follow many different paths while transmitting data. 


Practice 12.4 


Fill in the blank for the statements about ATM and VoIP. The following terms can be used more 
than once. 


ATM VoIP 


iene protocol is especially designed for carrying 1; 
audio, video, and multimedia. 


2. The 


Sh The protocol can be used by mixing TCP/IP with 
modern telephone technologies. 


protocol can support a bandwidth of 622 Mbps. 


4. The protocol is designed to divide text and 4. 
audio/video into cells of 53 bytes each. 
5. The protocol typically uses a series of UDP packets to 5; 


send time-sensitive data, such as telephone conversation. 


6. The protocol can be transmitted at a Constant Bit o 
Rate (CBR), Variable Bit Rate (VBR), Available Bit Rate 
(ABR), or Unspecified Bit Rate (UBR). 


is an Internet telephony protocol that relies Z 
on existing TCP/IP technology and existing TCP/IP 
networking equipment. 
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8. The 


9: 


10. 


Name 


cells carrying audio and video are given 8. 


the highest priority so that a constant flow of the 


time-sensitive data can be maintained. 
The 


protocol is separate from the TCP/IP stack and =) 


uses special equipment designed for the protocol, such as 
switches and dedicated communication lines. 


uses the TCP protocol for applications such as video 10. 


or audio streaming because the TCP protocol has a sequence 
number in the header, which ensures packets are arranged in 
proper sequence when they arrive at the final destination. 


Practice 12.5 


Match the ATM data transfer classification to its definition. 


1 
2 
3 
4 
5 
6 


¿ABR a. 

BR 

ABR 

_ _____ VBR 

o VBRENRT b. 

BERT 
C: 
d. 
es 
f. 
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An ATM data transfer classification in which the cell 
rate automatically adjusts to support time-sensitive 
data. It uses multiplexing techniques to provide a 
minimum CBR for time-sensitive audio and video 
transmissions while controlling the data rate of 
non-time-sensitive data, such as text or plain e-mail. 
An ATM data transfer classification in which a steady 
stream of ATM cells move at a predictable rate. 

An ATM data transfer classification that allows cells 
to move at a variable rate. The rate of movement 
depends on the type of data contained in each cell. 
An ATM data transfer classification that allows cells to 
move at a variable rate depending on the cell's contents 
to support real-time audio and video transfers. 

An ATM data transfer classification most appropriate 
for file transfer. It uses the available bit rate 
associated with the networking medium. The speed 
of the file transfer is affected by the amount of traffic 
on the network system. 

An ATM data transfer classification that does 

not guarantee any speed or meet requirements 

of any special application such as multimedia or 
telephony. This classification is typically applied 
inside TCP/IP frames. 
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Practice 12.6 


Fill in the blank for the statements about VoIP transmission technology and protocols. The 
following terms can be used more than once. 


bandwidth shaper H.323 hard phone 
Quality of Service (QoS) Real-time Transport Protocol (RTP) Session Initiation Protocol 


(SIP) soft phone telephone gateway 


IFAN) is a specialized piece of equipment that E 
connects a packet-style network communications system 
to a telephone system using the protocol. 


2. The standard is the telecommunications standard 2, 
for audio, video, and data communications using IP 
or packet-type networks defined by the International 
Telecommunication Union (ITU). 


3. A(n) is used to prioritize network packets to ensure a 
quality of service for time-sensitive applications such as VoIP. 


4. The standard and protocol for initiating, maintaining, and 4. 
terminating the exchange of voice, multimedia, gaming, 
chat, and more is called 


5. The does not carry the data, but rather establishes 5. 
and maintains the session until the session is terminated. 


6. A(n) is a physical telephonic device, and a(n) 6. 
is a virtual telephonic device. 


7. Ure is a standard and a protocol used to stream M 
voice and video in real time. 


8. The protocol gives time-sensitive packets, such as 8. 
those carrying telephone conversations, a higher priority 
than data packets. 
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Name 


Practice 12.7 


Fill in the blank for the statements about VoIP troubleshooting. The following terms can be used 
more than once. 


audio device configuration connection failure firewall impedance mismatch 


jitter latency protocol analyzer 


1. One of the most common causes of VoIP echo is I. 

2. A common example of is connecting a two-wire 2. 
local loop telephone circuit to a four-wire telephone 
circuit. 

3. One of the most common sources of VoIP problems is the 3. 
computer’s blocking the packets. 

4. Performance problems are typically caused by —— 4. 
and, 

5. A complete failure of the VoIP system generally relates to ds 
a(n) between the destination and source. 

6. What may seem to be a complete failure of the VoIP | 6. 
system could be due to the 

7. Dropping or losing packets causes and results in a 7. 
choppy voice transmission. 

8. A(n) can be used to verify the exchange of packets 8. 


needed to support a VoIP service. 
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Name — >=> > 3 TS _séz*Dattlre 
Period 


Web Servers and 
Services 


Introduction 


For the Network+ Certification exam, you should be familjar with the function of the following 
protocols: FTP, HTTP, HTTPS, IMAP4, NNTP, POP3, SFTP, SMTP, and TFTP. 


Practice 13.1 


Identify the characteristics of an Internet (inter), intranet (intra), and extranet (extra). 


de Referred to as the World Wide Web. E 

Ze A private network that services a specific group of 2. 
users within a LAN. 

3. ———— Allows internal and external access to Web pages by 3. 
personnel. 

4. Allows partner companies, employees, and 4. 


authorized customer access. 


A collection of interconnected networks from all 5 
around the world. 


6. ———— Can be accessed by the general public. 6. 


Practice 13.2 


Label the parts of a URL. 
domain name path port protocol resource 
URL 

http://www.g-w.com/books/index.html:80 
|| 

ali il 

a E, e 

b. d 
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Practice 13.3 


Match the Web communications term to its definition. 


C58 a. A protocol designed for communications between a 
2. HTML Web browser and a Web server. A 
b. A markup language based on the same principles as 
3. —— HTTP HTML, with the added ability to create custom tags. 
4 JavaScript c. An enhancement to HTML tags that can be 
embedded into a Web page or exist as a separate 
5. —— NNTP page to control all pages in a Web site. 
a SGML d. A set of rules constructed from XML for Web-based 
messages that allows a client to freely interact with a 
7, — SOAP Web page on the Web server, rather than download it. 
8. XML e. Programming language used to create Web pages. 


f. ATCP/IP protocol that is designed to distribute 
news messages to NNTP clients and NNTP servers 
across the Internet. 

g. The original standard for both HTML and XML. 

h. Aprogramming language that is designed to be 
embedded into an HTML Web page and allow the 
user to interact with the Web page. 


Practice 13.4 


Fill in the blanks for the statements about Web services. The following terms may be used more 
than once. 


HTML tag hyperlink Hypertext Markup Language (HTML) 
Hypertext Transfer Protocol (HTTP) newsgroup search engine 
Web browser Web server Website 


1. <body> is an example of a(n) 1. 
2. Apache and IIS are examples of software. 
3. A(n) is a location on the World Wide Web that 3. 
contains a collection of Web pages and files that can be 
accessed through the Internet. 
4. A(n) permits the user to navigate the World Wide 4. 


Web and then interprets and displays Web pages. 


5. Google is an example of a(n) 


6. Firefox is an example of a(n) 
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10. 


ME 


. A(n) 
. Clicking a(n) 


. The 


Name 


is an instruction for how the text and graphics 
should appear when displayed in a Web browser. 


on a Web page will take you to 
another Web page or to an area on the same Web page. 


is a programming language used to create 
Web pages. 


The is designed for communication between a Web 
browser and a Web server. 


News articles arranged in groups or categories on an 
NNTP server are referred to as a(n) 


Practice 13.5 


Fill in the blanks for the statements about the FTP protocol. The following terms may be used more 
than once. 


5. The 


7. The 
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. The lightweight version of FTP is called 
. The 


. The 


. The 


. With the 


. A(n) 


10. 


file 


anonymous FTP FTP SFTP 


protocol uses UDP packets and, therefore, does 
not establish a connection between the client and server. 


protocol requires a user name and password 
but does not encrypt the password or the contents of 
transferred files. 


protocol never requires the use of a user 
name and password because it uses UDP packets for 
transferring data. 


protocol uses fewer commands than FTP. 


The 


protocol is a secure version of FTP. 


protocol encrypts the user name, password, and 
data to provide a high level of security. 


protocol, the client is allowed to transfer 
files, but not to view the directory listing at the FTP site. 


site does not require a password or any other 
form of authentication to access the site. 
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Practice 13.6 


Fill in the blanks for the statements about e-mail service protocols. The following terms may be 


used more than once. 


A o eee 


HTTP IMAP 


MIME POP SMTP 


NN 


1. The mail server uses the or 


protocol to Y, 


communicate with and to download e-mail to the client. 


2. A protocol that is part of the TCP/IP protocol suite and is 2. 


designed to transfer plain text e-mail messages from an 
e-mail client to a mail server and from a mail server to a 


mail server is called ___ 


3. Asophisticated mail access protocol that can manipulate 3. 
e-mail while it is on the server is called 

4. When setting up an e-mail account, the mail server is 4. 
designated as a(n) server for sending e-mail and as 
a(n) or server for retrieving e-mail. 

5. Web-based e-mail is also referred to as e-mail. 5 

6. A simple protocol designed to access a mail server and 6. 


download messages to the e-mail client is called 


7. The 


protocol allows e-mail attachments to 7 


be transferred as separate files using SMTP as the 


transport protocol. 


Practice 13.7 


Match the mail communication term to its definition. 


1. ——— mail gateway a. 
2. mail filter 
b. 
oy spam c. 
4. spamming 
5: spammer T 
e. 
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An unwanted or unsolicited e-mail such as 
advertisement. 

Blocks unwanted e-mail messages. 

A person who engages in distributing unsolicited 
e-mail or sending e-mail with some sort of 
advertisement as a probe. 

A special software and device used to connect two 
normally incompatible e-mail systems. 

The distribution of unsolicited e-mail. 
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Name _ Date 


Period 


Remote Access 
and Long-Distance 
Communications 


Introduction 


For the Network+ Certification exam, you should be able to recall the basic characteristics of 
Internet access and WAN technologies. 


Practice 14.1 


Fill in the blanks for the statements about telecommunications systems. The following terms may be 


used more than once. 


Local Central Office Local Exchange Carrier (LEC) local loop 
Point of Presence (PoP) Public Switched Telephone Network (PSTN) trunk line 


1. A_____ consists of hundreds of pairs of twisted pair cable 1 
or fiber-optic cable. 

2. The Local Central Office can be tied to another Local 2 
Central Office via a —— 

3. The is the section of wiring between customer 3. 
premises and the Local Central Office. 

4. A local carrier is often referred to as a and is made 4. 
of one or more Local Central Offices. 

5. The location where the customer’s telephone lines connect 5. 
to the switchgear is called the 

6. The is the point where the telephone company line 6. 


connects to the subscriber line. 
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Practice 14.2 


Identify the data rate of the Internet access technologies. The following terms may be used more 


than once. 
es 
1.544 Mbps 1.544 Mbps-52 Mbps 27 Mbps-37 Mbps 
400 kbps-2 Mbps 44.736 Mbps 56 kbps 


I aaa 


. Cable Internet service (downstream): 
DSL: 
PRI-ISDN: 
PSTN: 

. Satellite Internet service: 
E 

akey 


NQ oT PWN 


Practice 14.3 

Write the full name of the ISDN acronyms. 
A RAE AA — AAA ON 
A BN. 
O AAA  —— AA AAA S), 


Practice 14.4 


Fill in the blanks for the statements about ISDN. The following terms may be used more than once. 


1.544 Mbps 128 kbps bearer B-ISDN 

BRI-ISDN delta PRI-ISDN 
1. BRI-ISDN has a maximum data rate of ; J: 
2. PRI-ISDN has a maximum data rate of 3 2. 
3 consists of two B channels and one D channel. 3. 
4. can carry multiple frequencies. 4. 
5. The channel carries control signals. 5. 
6. The channel carries voice, video, or a combination 6. 

of voice and data. 

Zhe channel has a maximum bandwidth of 16 kbps. 7. 
8. Each channel has a maximum bandwidth of 64 kbps. 8. 


consists of twenty-three B channels and one D channel. 
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Name 


Practice 14.5 


Match the WAN connection technology to its definition. 


Le Basic Rate ISDN (BRI-ISDN) a. Adigital, packet switching technology. 
> Broadband ISDN (B-ISDN) b. An analog packet switching network 
technology developed in the 1970s, 
6) Cable Internet access which can support a maximum 
4. Digital Subscriber Line (DSL) bandwidth of 56 kbps. 
c. Similar in design to T-carrier 
5. — FDDI technology except that it bases its 
6. Frame Relay technology on fiber-optic cable. 
, aa d. Adual ring, fiber-optic arrangement 
iB Integrated Services Digital Network (ISDN) often used in a MAN distribution 
8. Primary Rate ISDN (PRI-ISDN) system because of its reliability and 
9 its high bandwidth. 
Satellite Internet service e. Uses the Cable television distribution 
10. _____ Synchronous Optical Network (SONET) system to provide Internet access. 
11 T : f. Consists of a small dish for 
“ae downloading and a landline, such 
123 = X.25 as a traditional telephone line, for 


uploading. 

g. A long-distance connection 
technology that provides a means 
for a fully digital transmission over 
channels that are capable of speeds of 
up to 64 kbps. 

h. A category of ISDN that consists of 
three conductors: two B channels, 
referred to as bearer channels, and 
one D channel, referred to as the 
delta channel. 

i. A category of ISDN that consists of 
twenty-three B channels and one 
D channel. It has a total data rate of 
1.544 Mbps. 

j. A category of ISDN that is designed 
to carry multiple frequencies. 

k. A leased line dedicated to 
networking that uses multiple 
frequencies as separate channels on 
the existing telephone local loop. 
The multiple channels combine to 
carry more data than the original 
telephone modem design. 

l. A leased line that follows one of the 
standards known as fractional T1, T1, 
i on Me 
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Practice 14.6 


Fill in the access method and data rate for the WAN connection technologies. 


WAN Access Method Data Rate 


Comnechón 


5 (dial-uys, direct connection, or 
technology 


virtual commechon) 


PSTN 

Loo ROS S -— to 
Cable Internet service De to 

a MPAA Upstream: — =T A 
PRI-ISDN 


Fractional T1 


al 
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Name 


Practice 14.7 


Match the remote access protocol to its function. 


1. Bandwidth Allocation Protocol (BAP) a. Creates a simulated, independent 
D Layer 2 Forwarding (L2F) network through software over a 
, public network. 
3. Layer 2 Tunneling Protocol (L2TP) b. A remote access protocol that can 
4. ——— Multi-Protocol Label Switching (MPLS) combine two or more physical links so 
re l lee that they act as one, thus increasing the 
5. ———— Multilink Point-to-Point Protocol (MLPPP) supported bandwidth. This protocol 
6. Point-to-Point Protocol (PPP) works with ISDN lines, PSTN lines, and 
, X.25 technology. 
de Point-to-Point Protocol over Ethernet (PPPoE) ¿A routing eal marala abha 
8. Point-to-Point Tunneling Protocol (PPTP) to be attached to an IP packet in 
9. Remote Deo Brotacol (RDP) pd to route the packet to a specific 
estination. 
10. Serial Line Internet Protocol (SLIP) d. A remote access protocol that allows 
1i: Virtual Private Network (VPN) no aa A 


network to establish an individual 
PPP connection with an ISP. 

e. A remote access protocol that is 
an enhanced version of PPP. It is 
designed to enhance security and 
to make use of a virtually private 
network using the public Internet. 

f. A remote access protocol, similar to 
PPTP, designed to enhance security 
and to make use of a virtually private 
network using the public Internet. 

g. A remote access protocol that enables 
a PC to connect to a remote network 
using a serial line connection, 
typically through a telephone line. 

It is a synchronous protocol that 
supports multiple protocols such as 
IPX and AppleTalk. 

h. Acommunications protocol that can 
change the number of lines or channels 
according to current bandwidth. 

i. Aremote access protocol that enables 
a PC to connect to a remote network 
using a serial line connection, 
typically through a telephone line. 

It is an asynchronous protocol that 
supports only IP. 

j. A presentation protocol that allows 
Windows computers to communicate 
directly with Windows-based clients. 

k. A tunneling protocol that uses 
IPSec to encrypt the contents of the 
encapsulated PPP protocol. 
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Name Date 
Period 


Network Security 


Introduction 


For the Network+ Certification exam, you should be able to recall the function of security devices 
such as Intrusion Detection Systems (IDSs), Intrusion Prevention Systems (IPSs), and network- and 
host-based firewalls. You should also be able to identify the basic characteristics of authentication 
and security protocols, identify common security threats and their characteristics, and explain the 
common features of a firewall. 


Practice 15.1 


Fill in the blanks for the statements about hackers, crackers, and intruders. The following terms 
may be used more than once. 


cracker hacker intruder 
1. The term originally described any computer li 
enthusiast who lacked formal training. 
2. The term has been redefined to identify anyone who Ze 


gains unauthorized access to a computer system. 


3. A(n) is defined as anyone who gains access to a Sh 
computer system without authorization and with the 
intent to do harm or play pranks. 


4. According to the Networking Fundamentals textbook, 4. 
anyone who gains access to a computer system they are 
not authorized to access is called a(n) 
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Practice 15.2 


Match the network security breach to its definition. 


backdoor 
Denial of Service (DoS) 


1 

2 

3. — — macro virus 

4. _____ man in the middle (MITM) 
5. ——— phishing 

6 replay attack 

7 
8 
9 


. — Smurf attack 
—— social engineering 


spoofing 


10. 
VE 


Trojan horse 


worm 


Practice 15.3 


a. 


A method of using previously copied and stored 
information, such as an IP or MAC address, to establish 
an unauthorized connection with the destination. 

The manipulation of personnel by the use of deceit to 
gain security information. 

Fooling the destination by using an IP address other than 
the true IP address of a source to create a fake identity. 
A software program that can spread easily and 
rapidly to many different computers. 

A program designed to gain access to a computer 
while pretending to be something else. 

Denying access to a server by overloading the server 
with bogus requests. 

A type of DoS that consists of spoofing the target 
address and then pinging the target broadcast address. 


. A virus created by storing a series of keystrokes 


known as a “macro” produced by a word-processing 
software application. 

A method of Internet fraud that involves using 
e-mail to steal a person’s identity and other sensitive 
information, such as financial. 

A software access port to the computer that a Trojan 
horse has infected. 

A method of intercepting a network transmission, 
reading it, and then placing it back on route to its 
intended destination. 


Identify the characteristics as belonging to an Intrusion Detection System (IDS) or an Intrusion 
Prevention System (IPS). Some characteristics may belong to both IDS and IPS. 


1. ____ Only detects unauthorized activity. de 

2 Requires some form of port monitoring. 2 

3. A reactive security protection system. 3. 

4. Detects unauthorized activity and performs some 4 
function to stop the activity. 

5i Microsoft Event Viewer is an example of this type al 
of system. 

6. An antivirus software program is an example of this 6. 
type of system. 

Io Can generate false positives. 7. 
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Name 


Practice 15.4 


Fill in the blanks for the statements about security terminology. The following terms may be used 
more than once. 


asymmetric-key Certificate Authority (CA) ciphertext 
cryptology digital certificate encryption 
key Public Key Infrastructure (PKI) symmetric-key 


1, The method of using an algorithm to encode data is di 
called ; 


. The science of encoding data is called 


. Encrypted data is referred to as 


. An algorithm used to encode data is called a(n) 


In encryption, both parties use the same key to 
perform encryption and decryption. 


6. In encryption, two keys are used: a private key and 6. 
a public key. 


a fF WON 
ASAS O 


7. Typically, a service referred to as the contains the 7 
security list of users authorized to access the private key 
owner's messages, using a public key. 


8. A(n) is a file that commonly contains data such as 8. 
the user’s name and e-mail address, the public key value 
assigned to the user, the validity period of the public key, 
and issuing authority identifier information. 


: 9i 
t 10. 


11. The use of public keys to create a secure environment for the 11. 
exchange of data between network devices is called 


9. Secret-key cryptography is also called 


10. Public-key cryptography is also called 
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Practice 15.5 


Match the security protocols to their definitions. 


1. ———— Independent Computer Architecture (ICA) a. A security protocol developed by Netscape 

: to secure transactions between Web servers 
5 Te dG and individuals using the Internet for such 
Sl Secure Copy Protocol (SCP) purposes as credit card transactions. 
4. Secure HTTP (S-HTTP) b. An Internet security protocol that secures 

individual messages between the client 
5. Secure Shell (SSH) and server rather than the connection. 
6. Security Sockets Layer (SSL) c. A security protocol developed by the 
i Internet Engineering Task Force (IETF) to 

7. Transport Layer Security (TLS) secure transactions between Web servers 


and individuals using the Internet for 
such purposes as credit card transactions. 

d. A protocol that provides secure network 
services over an insecure network 
medium such as the Internet. 

e. A proprietary protocol designed by 
Citrix Systems to support the exchange 
of software applications between a 
server and client. 

f. An IETF standard for securing 
point-to-point connections in an IP-based 
network using encryption techniques. 

g- A protocol that provides a secure way of 
transferring files between computers. 


Practice 15.6 


Fill in the blanks for the statements about IPSec. The following terms may be used more than once. 


Authentication Header (AH) Encapsulation Security Payload (ESP) Kerberos 


transport tunnel 


1 Encrypted _} 


Gateway / router 
1. The IPSec mode in illustration A is an example of mode. Íl 
2. The IPSec mode in illustration B is an example of mode. des 
3. The mode encrypts the payload and the header a 
information. 
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Name 


4. The mode encrypts only the payload (data) portion 4. 
of the packet. 
5. Two common protocols associated with IPSec are 5: 
and l 
6. When implementing IPSec, authentication can be verified 6. 
using , a preshared key or digital certificate. 
Practice 15.7 
Fill in the blanks for the statements about wireless security. 
802.11i Media Access Control (MAC) filter 
Remote Authentication Dial-In User Service (RADIUS) Wi-Fi Protected Access (WPA) 
Wi-Fi Protected Access 2 (WPA2) Wired Equivalent Privacy (WEP) 
1. A(n) allows or restricts Wireless Access Point access il 
based on the MAC address of a wireless network card. 
2. The first attempt to secure the data transferred across a 2 
wireless network was with the protocol. 
3 The uses a more complex encryption system than 3. 
WEP and has become the replacement for WEP. 
4. The protocol is an enhanced version of WPA. 4. 
5. The standard specifies the use of a 128-bit Advanced a 


Encryption Standard (AES) for data encryption. 


6. The service allows remote access servers to 6. 
authenticate to a central server. 


Practice 15.8 
Label the components required by 802.111. 


authentication server authenticator RADIUS supplicant 


Wired Network a| Server with 
A" Mene et RR d. 
b. 
Laptop with 
wireless network | 
device Wireless Access Point 
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Practice 15.9 


Fill in the blanks for the statements about wireless security. The following terms may be used more 


than once. 
>. o A AA E 
AAA proxy accounting authentication authorization 
1. Triple A is a security standard that consists of three parts: iig 
2. The process of identifying which system resources a user Za 
may use is called 
3. AG) system tracks what resources a user accesses a 


and keeps a record of user activity. 


4. The process of verifying the identity of a user is called 4. 


5. Diameter is an IETF standard and protocol designed So 
to secure a connection between two or more devices. 


6. The is any network device that acts as an 6. 
intermediary to exchange security packets between the 
AAA server and an AAA client. 


Practice 15.10 


Identify the characteristics as belonging to RADIUS (R) or TACACS+ (T). 
ile 


Uses separate databases for authentication, authorization, and accounting. 
Encrypts only the password. 
Uses connectionless UDP. 


Uses a token-based authentication method. 


Uses connection-oriented TCP. 


Uses one database for authentication, authorization, and accounting. 


ND 7 BF WN 


Encrypts the entire exchange of logon packets. 
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Name 


Practice 15.11 


Match the authentication protocol to its definition. 


E 


Challenge Handshake Authentication 
Protocol (CHAP) 


Extensible Authentication Protocol (EAP) 


Kerberos 


Lightweight Extensible Authentication 
Protocol (LEAP) 


Microsoft Challenge Handshake 
Authentication Protocol (MS-CHAP) 


Password Authentication Protocol (PAP) 


Protected Extensible Authentication 


Protocol (PEAP) 
veri protected Access (WPA) 
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An authentication protocol that sends 
a user name and password in plain 
text format. 

An authentication protocol that sends 
an encrypted string of characters 
that represent the user name and 
password. It does not send the actual 
user name and password. 

An enhanced version of CHAP that 
encrypts the user name, password, 
and data and must be used with 
Microsoft operating systems. 

An IETF standard that is used for 
network access and authentication in 
a client/server environment when IP 
is not available. 

A security authentication system 
that provides both authentication 
and encryption services and uses a 
two-way method of authentication. 
Enhances EAP authentication by 
encapsulating the EAP protocol inside 
an encrypted PEAP packet over a 
wireless network. 

An authentication system 

developed by Cisco that periodically 
re-authenticates the wireless 
connection. 

Developed by the Wi-Fi organization 
as a solution to the vulnerabilities 
discovered in WEP. 
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Practice 15.12 


Fill in the blanks for the statements about security implementation. 
A AA A A AAA ŘŘ 


hash open ports service pack Zero Configuration (Zeroconf) 
a ESA A Eee 


1. A third-party utility or the netstat utility should be used 1. 
to check for 
2. Ifa Wireless Access Point (WAP) is installed with default Ze 


settings and it uses to configure the clients, anyone 
using a wireless network card of the same brand as the 
WAP can access the network. 


3. Before the installation of an operating system or software de 
application is considered complete, the latest must 
be installed. 
4. A network administrator must ensure that secure 4. 
passwords, which an intruder cannot easily crack or 
, are used. 


Practice 15.13 


Fill in the blank for the statements about firewalls and proxy servers. 


application gateway circuit-level gateway content filter 
demilitarized zone (DMZ) firewall firewall signature identification 
packet filter proxy server stateful packet inspection 


stateless packet inspection 


1. A(n) is a hardware device or software that passes or LE. 
blocks packets as they enter or leave a network system. 

2. A(n) inspects each packet as it passes through the 2 
firewall and then accepts or rejects the packet based on a 
set of rules. 


3. The firewall inspection method called inspects the 3 
sequence of packets to detect missing packets or an altered 
sequence. 


4. The firewall inspection method called inspects and 4. 
filters individual packet attributes such as IP address, port 
number, and protocols. 


5. A(n) is configured to accept traffic based on the 5. 
exact match of the application permitted. 
6. A(n) monitors a connection until it is successfully 6. 


established between the destination and source host. 
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Name 


7. The is a hardware device or software that provides 7 
security based on packet contents. 
8. The is the area of a network that permits access 8. 
from a host located outside the local area network. 
9. A hardware device or software that works in similar o: 
fashion as antivirus protection is called 
10. A(n) can cache information such as frequently 10. 


visited Web sites and their IP addresses. 


Practice 15.14 


Identify the characteristics as belonging to biometrics (B) or smart card (SC). 


IA SCIENCE: 

2 A technology. 

3. Uses the unique features of a person to confirm his or her identification. 
4. _____ Incorporates a special card into the security system. 

5. ———— Often used in conjunction with a personal identification number (PIN). 


| Practice 15.15 


Fill in the blank for the statements about security tools. The following terms may be used more 


than once. 
audit tool netstat utility packet sniffer 
protocol analyzer self-hack tool system backup 


1. To check for open ports, use the with the -a switch dE 
at the command prompt. 
2. Event Viewer is considered a(n) because it allows 2. 


network activity or events to be monitored and logged. 


3. GFI LANguard can be used as a(n) to probe the LAN for 3! 
open communication ports and general security weaknesses. 


4. A(n) can reveal information about protocols such 4. 
as the source and destination IP address, MAC address, 
port address, time of transmission, and the contents of 
unencrypted packets. 


5. A(n) is mainly designed as a tool to capture packet 5 
contents and header information and to provide limited 
information. 

6. The can be used to restore corrupted data; however, 6. 


any data that has been modified or saved since the last 
backup cannot be restored. 
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Practice 15.16 


Match the data security compliance requirement to its definition. ¢ 
il California SB 1386 a. A legislative act that requires all organizations 
>. Health Insurance Portability that own or have access to personal information 


of California residents to notify the person of any 


dA tability Act (HIPAA 
and Accountability Act ( ) breach of security of his or her personal data. 


3. —— Payment Card Industry Data b. A legislative act that imposes standards on financial 
Security Standard (PCI DSS) institutions to secure personal financial records. 
4. Sarbanes-Oxley (SOX) c. A set of standards designed to protect health records. 
d. A set of credit card security standards designed to 


protect credit card information. 
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Introduction 


Name Date 
Period 


A Closer Look at the 
OSI Model 


For the Network+ Certification exam, you should be able to identify the function of each OSI model 
layer. You should also be able to identify the layer at which a network device operates. 


Practice 16.1 
Match the OSI layer to its definition. 


1 
2 
3 
4 
5 
6 
7 
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. _____ application 
; data link 


. — network 


. ——— physical 
——— presentation 


session 


o transport 


a. Negotiates a common set of symbols that the source 
and destination hosts can interpret. 

b. Establishes, maintains, and terminates the connection 
with the destination. 

c. Converts the data package into electrical pulses and 
places them on the network media. 

d. Interfaces with the networking application. 

e. Provides reliable end-to-end data transmissions and 
error-checking techniques based on sequence packet 
numbers and software programs. 

f. Concerned with navigating the network by using IP 
addresses. 

g. Provides the path for the raw digital pulses that are 
moved along cables and connectors. 
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Practice 16.2 


Fill in the blank for the statements about the layers of the OSI model. The following terms may be F 


used more than once. 
AA  ——— —— 


application data link network physical 


presentation session transport 
| A a eee o oo 


i, Iiye layer is where IP addressing is added to the T 
segment and the segment is turned into a packet by 
including the IP address of the destination and source. 


2. The layer establishes, maintains, and terminates a pi 
connection with a destination host. 
oo lhe layer is where the user interfaces with the 3. 


network system using network programs such as a Web 
browser, FTP, Telnet, and an e-mail client. 


4. The layer is concerned with bit sequence and with 4. 
using an acceptable data format such as ASCII, EBCDIC, 
and CODEC. 


ale layer provides the path for digital signals 5 
and represents the media, connectors, and passive 
components. 


6. The layer is concerned with providing reliable, 6 a 
accurate data in the most efficient manner. 0 


The layer is where frames are converted into 7 
a serial stream of data and decisions based on MAC 
addresses are made. 


8. Token is the name given to the packet that exchanges 8. 
information between the source and destination. 


9. Atthe layer, the destination host and source host o 
decide the maximum size of each segment and the 
amount of segments that will be sent before requiring an 
acknowledgment. This process is called windowing, or flow 
control. 


10. Atthe layer, the size of the packet is determined 10. 
based on the buffer size (amount of memory to 
temporarily store data) at the destination and source host. 


11. The layer uses Service Access Points (SAPs), or Mig 
MAC addresses that identify a protocol and its service, 
to communicate with protocols at various layers of the 
OSI model. 


12. The layer uses the Internet Management Protocol pe 
(IGMP) to support multicasting, or sending the same data 
packet to a group of hosts identified by one IP address. 
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Name 


Practice 16.3 


Fill in the blanks for the statements about the MAC and LLC sublayers. 


LLC 


. The 


. The 


sublayer converts the frame and its contents 
into a series of digital pulses to be carried on the media 
(physical layer). 


The sublayer prepares for half-duplex or full-duplex 
transmission based on media type. 


sublayer is concerned with framing the contents 
of the upper levels, including the MAC addresses of the 
source and destination. 


4. The _____ sublayer performs collision avoidance. 

S TMe sublayer deals with physical addresses rather 
than logical addresses. 

6. The sublayer ensures the reliability of the physical 


7. The 
8. The 


connection rather than of the data contained within the 
frame. 


sublayer negotiates transmission speed. 


sublayer performs a Cyclic Redundancy 
Check (CRC). 


Practice 16.4 


Match the network device to the statement about how it handles packet delivery. Statements can be 
used more than once. 


l; 


$9 l EN E 
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bridge a. Makes no decision about where a packet is sent. 
b. Makes decisions about where a packet is sent based 
hub ; 
on a MAC address or a logical name. 
network interface card c. Makes a decision about where a packet is sent based 
repeater on a protocol such as the Internet protocol. 
e pouter 
switch (layer 3) 
___ transceiver 
1 WAR 
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Practice 16.5 


Identify the OSI layer(s) at which the following network devices operate. Some network devices 
operate at more than one layer. 


application data link network physical 


presentation session transport 


. bridge: 
. gateway: 
hub: 


. network interface card: 


» repeater: 


. router: 


. Switch (layer 2): 


. transceiver: 


0 OND TF PF WON e 


. Switch (layer 3): 


i 
S 


. Wireless Access Point: 


ay 
= 


. Switch (layer 4): 


= 
N 


. amplifier: 
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Name Date _ 
Period 


Maintaining the Network 


Introduction 


For the Network+ Certification exam, you should be able to identify the types of methods used in 
maintaining a network, such as establishing a baseline, using monitoring tools, documenting and 
carrying out policies and procedures, and applying patches and updates. You should also be able to 
recall the characteristics of common security threats. 


Practice 17.1 


Fill in the blanks for the statements about monitoring the server and network. 


average utilization baseline 

frame size average frame size peak 

peak utilization Simple Network Management Protocol (SNMP) 
swap file 


1. When an operating system uses the instead of RAM, il, 
data processing slows because the hard disk drive cannot 
perform at the same high speed as the RAM. 


2. The only way to objectively determine the performance of 2. 
a network or server is to establish a(n) immediately 
after the network or server is installed. 


3. The highest level of utilization experience by a network is 3. 


called ; 

4. The average amount of utilization or traffic on the 4. 
network in the time period monitored is called 

5: The is a record of the largest frame size recorded 5 
during the time period monitored. 

6. The is the average of all frame sizes during the 6. 
period monitored. 

7. The was designed by the ITEF to support network 7 


management, allowing an administrator to manage and 
monitor network devices and services from a single location. 
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Practice 17.2 


Fill in the blanks for the statements about maintaining the network. 7 
bug cluster disaster recovery 
fault tolerance service pack 


ee 2 —— — —— 


1. A software program error is referred to as a 1. 

2. Microsoft uses the term to describe a collection of 2 
software patches, or fixes. 

Sh JA is a group of servers that share the network 3! 
demand and allow a server to be taken off-line without 
disrupting network activities. 

4. A system’s ability to continue operation during a system 4. 
hardware or software error is referred to as 

5. The restoration of a system to normal operation after a 5. 


disaster has occurred is referred to as 


Practice 17.3 


Identify each of the strategies and devices as either fault tolerance (FT), disaster recovery (DR), or 
neither (leave blank). 


il 


a comparable disk drive kept in storage ” 


a running system and backup data kept at a storage facility 


clustered servers 


cold spare 


dual ring topology 


. — full backup with a differential backup 
——— full backup with incremental backups 


generator 


SONA PR WD 


hot spare 
OTT _ RAID 0 
ieee RAIDS 


12. ____ Uninterruptible Power Supply (UPS) 
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Name 


Practice 17.4 


Fill in the blanks for the statements about backup and restore strategies. Some of the following 
terms may be used more than once. 


differential each full incremental the last 

1. A(n) backup operation copies all identified data ie 
during a single backup period. 

2. A(n) backup backs up all data that has been 2i 
changed since the last full backup. 

3. A(n) backup copies only files that have changed 8} 
since the last backup. 

4. The archive bit is reset every time a(n) backup or 4. 
a(n) backup is performed. 

5. The archive bit is not reset when a(n) backup is 5 
performed or when a file is copied using commands such 
as copy and xcopy. 

6. When restoring data from an incremental backup, 6. 
incremental tape is needed as well as the last full backup. 

7. When restoring data from a differential backup, the last full Le 


backup and ——— differential backup created are needed. 


Practice 17.5 


Match the disaster recovery technique to its definition. 


SLD Sc IA 


cold site 


cold spare 


hot site 


hot spare 


—— warm site 
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a. 


A backup component that can automatically 
replace the failed system component without the 
intervention of a technician. 

A data storage facility where backup data is stored. 
A data storage facility where hardware and data are 
stored, but the data has not yet been loaded onto the 
hardware. 

Any compatible drive that is in storage and used to 
replace a failed drive. 

A data storage facility where a backup of data is 
stored as well as a running system containing the 
most up-to-date data. 
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Practice 17.6 
Match the power device or term to its definition. 


continuous UPS 


See generator 


isolation transformer 


Îl 

2 

3. 
4. ——— lightning arrestor 

power conditioning 

standby UPS 

. — — Uninterruptible Power Supply (UPS) 


ND a 


Practice 17.7 


Label the conditions of commercial electrical power. 


A special piece of electrical equipment 
designed to dampen the effects of an 
electrical surge caused by lightning. 

A device that ensures constant and 
consistent network performance by 
supplying electrical energy in case of a 
power failure or blackout. 

A UPS unit that waits until there is a 
disruption in commercial electricity before 
it takes over the responsibility of supplying 
electrical energy. 

A UPS unit that provides a steady supply 
of electrical energy at all times, even when 
there is no electrical problem. 

A device that uses a transformer to isolate a 
circuit from other circuits emanating from 
the same electrical source. 

The process of eliminating spikes and any type 
of variation in the desired AC signal pattern. 
A device that creates and provides electricity. 


blackout brownout 


spike surge 


120 volts 
0 volts 


-120 volts 


120 volts 
0 volts 


-120 volts 
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-120 volts 


-120 volts 


120 volts 


0 volts 


120 volts 


0 volts 
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Practice 17.8 


Match the malware and antivirus software term to its definition. 


1 
2 
3 
4 
5 
6 
7 
8 


. —__ antivirus suite 


backdoor virus 


hoax 


joke program 


logic bomb 


macro virus 


malware 


—____ MBR virus 


Practice 17.9 


Match the malware and antivirus software term to its definition. 


SNA TP wWN SS 


. 


password virus 


polymorphic virus 


scan engine 


stealth virus 


Trojan horse 


virus 


virus pattern file 


worm 
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Name 


a. 


b. 


a. 


An antivirus software package that includes 
additional features. 

A software program designed to perform some type 
of unauthorized activity on a computer. 

A type of malware designed with some sort of joke 
as the payload. 

A type of malware that attacks the master boot record 
(MBR) of a hard disk drive. 

A type of malware that remains dormant until a 
certain event takes place. 

A type of malware designed to go undetected and 
create a backdoor on a computer. 

A message that is spread about a real or unreal virus. 
A virus created by the macro feature of a software 
application program. 


A software program that reads each file indicated in 
the scan configuration and checks it against the virus 
signatures in the virus pattern file. 

A type of malware that appears as a gift, a utility, a 
game, or an e-mail attachment. 

A database of virus signatures, or codes, unique to 
each known virus. 

A type of malware designed to breach security by 
stealing passwords. 

A type of malware that infects files on a computer 
and automatically spreads to other computers. 

A type of malware that changes its characteristics or 
profile as it spreads to resist detection. 

A type of malware that hides from normal detection 
by incorporating itself into part of a known and 
usually required program. 

A type of malware that replicates itself on a computer 
after infecting it. 
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Name 


Date 


Period 


Network 


Introduction 


Fundamentals of 
Troubleshooting the 


For the Network+ Certification exam, you should be able to select the appropriate network utility 
or tool for a given troubleshooting scenario. You should also be familiar with CompTIA’s network 


troubleshooting methodology. 


Practice 18.1 


Match the CompTIA Network+ troubleshooting methodology to its example. 


1. _____ Information gathering—identify symptoms 
and problems. 

2. ——— Identify the affected areas of the network. 

a. Determine if anything has changed. 

4 Establish the most probable cause. 

5. Determine if escalation is necessary. 

6 Create an action plan and solution identifying 
potential effects. 

7. ———— Implement and test the solution. 

8. _____ Identify the results and effects of the solution. 

g; Document the solution and the entire process. 


a. 


Asking a question such as, “Was 

a new hardware device recently 
installed?” 

Asking a series of simple 
questions to better understand 
and isolate the problem. 

Keeping a history of a system, 
including problems and solutions. 
Attempting to duplicate the 
problem. 

Conducting an Internet search using 
key words related to the symptom. 
Documenting your work as you 
progress through the process of 
diagnosing and implementing a 
possible solution. 

Determining the scope or area of 
the problem. 

Before applying a possible solution, 
considering the extent of how it will 
affect the existing system. 
Determining if the problem should 
be passed on to a supervisor or 
someone with more expertise. 
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Practice 18.2 


Identify the stage of computer operation for each computer failure. 


POST OS load and initiation after a successful logon 
ea AA EA A A 2 


. corrupt driver file: 


. corrupt service: 


. hardware failure: 


. corrupt software application: 


oa fF WO N e 


. corrupt operating system: 


Practice 18.3 


Arrange the Windows Vista, Windows 7, and Windows Server 2008 boot process phases in the order 
of occurrence. 


initial startup ~ kernel loading logon phase 
POST Windows Boot Loader Windows Boot Manager 


aoe Se NY e 


Practice 18.4 


Match the boot event to the related boot process phase. 


1. initial startup a. The winlogon.exe program is executed and the logon 
dialog box appears. 

2 kamelloading b. The POST Bate looks for the boot device where the 

3: logon phase MBR is stored. 

T POST c. The system firmware performs a quick check of 

hardware components and verifies that all hardware 
5. ——— Windows Boot Loader devices listed in the configuration database are 
6. Windows Boot Manager present and appear to be in working order. 


d. The winload.exe loads the NT kernel (ntoskrnl.exe) and 
hardware abstract layer (HAL) into RAM and then 
executes the kernel. 

e. The NT kernel loads the device drivers, initializes 
the HAL, and initializes the computer settings using 
stored values in the registry. 

f. The BIOS loads bootmgr. The bootmgr program starts 
winload.exe. 
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Name 


Practice 18.5 


Match the Windows troubleshooting tool to its function. 


NX G7 FON Pp 


system repair disc 


Last Known Good Configuration 


Recovery Console 


Roll Back Driver 


safe mode 


—— System Configuration 


. ——— System Restore 


Practice 18.6 


Match the network troubleshooting tool to its description. 
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1 
2 
3: 
4 


. ——— Optical Time Domain Reflectometer 


ARS o 


loopback 


—— network analyzer 


network cable tester 


(OTDR) 


protocol analyzer 


Time Domain Reflectometer (TDR) 


— _ tone generator and tracer 


wireless network tester /analyzer 


a. 


b. 


a. 


Allows the technician to select the startup 
items or services to be loaded. 

Allows the technician to enter system 
commands in an attempt to recover the system. 
Loads only standard video drivers and 
essential drivers. 

A disc used to repair or replace items such 

as the MBR, file allocation tables, system 
registry files, or system configuration files. 
Reverts the system to the last driver 
configured for a specific device. 

Replaces the system registry with the last copy 
of the registry made during a successful boot. 
Restores the operating system to a condition 
established at a previous time by rolling back 
the registry and removing executable files 
that were installed after the rollback date. 


Consists of two components: one that 
produces and transmits an analog or digital 
signal on a cable and the other that receives 
the signal. The two components work 
together to detect a cable fault. 

A device used when checking a hardware 
device's ability to transmit and receive signals. 
A device that performs a series of checks of 
cable integrity. It can quickly detect opens, 
shorts, and grounds. 

Checks signal strength and measures radio 
and electromagnetic interference. 

Sends an electronic pulse down copper core 
cable and then reads signal bounce to locate 
cable faults. 

Tests the entire network infrastructure. 

Sends light energy through a fiber-optic cable 
to detect defects in the core and connectors. 
Captures and monitors data frames traveling 
across the network media. 
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Practice 18.7 


Match the appropriate network utility to a troubleshooting scenario. ( 
1 arp a. Verify that a connection exists between the 
ee destination and the source. 
í a a b. Verify a path to a distant destination. 
3 nbstat c. Display information about active TCP/IP connections. 
4 net d. Verify that the WINS server is functioning properly 
or that NetBIOS over TCP has been configured 
5. netstat correctly on the network interface card. 
6 nslookup/dig e. Display information contained in the local routing table. 
f. Verify that the TCP/TP protocol is configured for the 
7 pathping network interface card at the host. 
8. ping g. Verify the physical address of another client or device 
, on the local network. 
7 Ding localhost h. Verify that the DNS server is available and that there 
10 route is a complete network media path to the DNS server. 
i. A Microsoft command-line tool used to investigate 
íl. tracert/traceroute 


the local network. 

j. Identify the IP configuration of a computer. 

k. Provides statistical analysis of the route to 
each router or gateway along a path to identify 
intermittent network bottlenecks. 


Practice 18.8 


Label each troubleshooting utility display. I 
arp -a ipconfig nbtstat -c net stats 
netstat -e netstat -r nslookup pathping 
ping route print tracert/traceroute 


Ethernet adapter Local Area Connection: 
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¿NsersMRichard> 


racing route to www.rmroberts.com [65.254.254.34] 

ver a maximum of 38 hops: 

Richard-PCuvin?.hsdi.fl.comcast.net. [192.168.1.199] 

192.168.1.1 

73.17.116.1 

ge-2-2-sr@i .sebring.fl.westfl.comcast.net ([68.86.199.77) 

te-3-2-sr@i.arcadia.fl.westfl.comcast.net [68.87.238.105 1 

te-9-4-urði .portcharlott.fl.vestfl.comcast.net 168.87.238.1081] 

te-8-2-ur@i .northport .fl.westfl.comcast net [68.87.238.65] 

te-8-4-ar82.venice.fl.vestfl.comcast.net [68.87.238.25] 

te-4-2-arði ._bonitasprngs.fl.naples.comcast.net 168.86.164.57] 

te-91-arB2.bonitasprngs .fl.naples.comcast.net [68.87.236.106 1 { 

10 te-8-2-8-5-arB3.northdade.f1-pompano.comcast.net [68.85.229.253] i 

11 pos-@-3-6-@-cr@i .miami.fl.ibona.comcast.net (68.86.91.221] 

12 pos—2-4-0-@-cr@1.atlanta.ga.ibone.comcast.net [68.86.86.1971] 

13 pos-8-2-8-8-peBl.Só6marietta.ga.ibone.comcast.net [68.86.86.166 1 

14 te4-2.ccr@i.at1@2.atlas.cogentco.com £154.54.1@.233) 

15 te?-4.ccr@1.ati@1_atlas.cogentco.com £154.54.6.165] 

16 teB-2-8-3.ccr21.dcaBl.atlas.cogentco.com (154.54.24.9] 

17 teM-148-3.ccr21.jfk92.atlas.cogentco.com 1154.54.5.245] 

18 te2-2.ccr82.bosB1.atlas.cogentco.com (154.54.5.242] 

119 66.28.52.154 

28 EnduranceInternationalGroup.demarc .cogentco.com [38.112.14.62] 
* e - 


00 YO Ud WN e O 


omputing statistics for 580 seconds... 

Source to Here This Node/Link 

ep RIT Lost/Sent = Pct Lost/Sent = Pet Address 

8 RU AS {192 .168.1.100) 


1 Gms Br 189 = Ux A 108 2 192.168.1.1 

2 8as @ 100 = & A toe E 73.17.1161 

3 9ms @ 190 = z o, 109 - ge-2-2-sr i .cebring.f1_westfl.comcast .net (68 .86 199.77] 

4 16ms D/ 1090 = øx A ian = O GRO: SUTRA UCL EOS [68.87.238.185] 

5 1@ms BD, 108 = øz E 195 E A a a (68 .87.238 .1611] 
6 iims @ 108 = @z A 168 E A A en eonenna 168.87.238.651 

?  16ms 0/ 108 = Oz B/ 168 = te-B-4-ar@2 .venice.fl.vestfl.comcast.net [68.87.238.251 

8 14ms @ 188 = & 8, 100 - te-4-2-ar61 .bonitasprnge .F1.naples.concast net [68 .86.164.57] 
2) 13ms @/ 108 = 8, ES 1e E E O AS (68 .87.236.106] 
16 19ms B/ 100 = Bz A u = O 1ec [68.85 .229.253] 
11 21ms B 100 = øz 0/ 198 3 pos—8-3-8-8-cr@1 .miami.f1-ibone.comeast .net (68 .86.91.2211 

12 33ms @ 100 = Bz 8 188 - pos-2-4-@-@-cr@it at lanta.ga.ibone.concast -net (68.86 .86.1971 

13 33ms Br 100 = øz A eH pos P2- B O A LT ase nut [68.86.86.1661 
14 37ms @ 100 = 0x @/ 168 = te4-2 -ccr@1 .at1@2.atlas.cogentco.com [154.54.18.233] 

15 42ms @ 189 = øz LA toe E te?-4.ccr@1 .at 181 atlas .cogentco.com [154.54.0.1651 

16 48ms @ 108 = 0% 8, ide E teB-2-8-2.ccr21.dcaBl .atlas -cogentco.con 1154.54.24.9] 

17 S3ms VD, 168 = 6% G 108 = 


teG-1-8-3 ,ccr21 . jf k@2.at las .cogentco.con [154.54.5-245] 


18 72ms @/ 188 = Gx = e te2-2.ccr82 .bos61.atlas .cogentco.com [154.54.5.242] 
= øz 
19  —6%ms B/ 100 = 9z = e e ds 
= 0% 
= 68ms 07 109 = & = Øz EndurancelnternationalGroup.demarc.cogentco.com [38.112.14.62] 


race complete. 


¿WisersNMRichard> 


¡NUsersMRichard> 


racing route to ww.rnroberts.com [65.254.254.34] 
puer a maximum of 38 hops: 


192.168.1.1 

73.17.116.1 

ge-2-2-srf@i .sebring.f1l.westfl.comcast.net [68.86.199.771 
te—-3-2-sr@1.arcadia.fl.westfl.comcast net [68.87.238.1051 
te-9-4-urði . portchar lott .fl.westfl.comcast.net (68.87.238 .i81] 
te-8-2-ur@i .northport .fl.westfl.comcast.net [68.87.238.65) 
te-8—4-ar@2 venice .fl.westfl.comcast.net [$8.87.238.251 
te—4-2-ar@i .bonitasprngs .fl.naples.comcast.net (68.86.164.571 
te—-9-1-ar@2.bonitasprngs.fl-naples.comcast net [68.87.236.186 1 
te-98-2-85-ar83 .northdade .f 1-pompano.corcast.net [68.85 .229.253) 
pos -8-3-8-9-cr8l .miami.fl.ibone.comcast.net (68.86.91.221) 
pos-2-4-@-@ cr@i .atlanta.ga.ibone.comcast.net [68.86 86.197] 
pos B-2-8-4M-peBl .S6marietta.ga.ibone.comcast net [68.86.86 .166) 
te4-2.ccr@1.at1@2.atlas.cogentco.com [154.54.18.233] 
te?—4.ccr@1.at1@1-atlaz.cogentco.com [154.54,8.1651 

te@-2-@-3 .ccr21 .dca@i.atlas-cogentco.com 1154.54.24.91 
te@-1-8-3 .ccr21. ¡f£k82.atlas.cogentco.com 1154.54.5.2451 
te2-2.ccrB2.bos01-.atlas .cogentco.com [154.54.5.242] 
66.28.52.154 

EnduranceInterationalGroup.demarc .cogentco.com [38.112.14.62] 
Request timed out. 

65-254-254-34. yourhoztingaccount.com [65.254.254.34] 


A AUN 


Trace complete. 
| iC: \Users\Richard> 
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Microsoft Windows [Version 6.1.7600] 


opyright (c> 2089 Microsoft Corporation. All rights reserved. 


C:WisersMRichard> 


Interface Statistics 
Received Sent 


ytes 852853416 741668185 
nicast packets 2823435 2461396 
jon-unicast packets 242126 51616 
iscards 6 a 
rrors B B 
nknown protocols B 


:\Users\Richard> 


—— —— = 


ocal Area Connection: 


Node IpAddress: [192.168.1.188] Scope Id: (1 


NetBIOS Remote Cache Name Table 
Host Address Life [sec] 
WINSERVER2668 <20> UNIQUE 192.168.1.183 


MICHELE—PC <28> UNIQUE 192.168.1.101 
NETLABIDOMAIN <1B> UNIQUE 192 .168.1.163 


ocal Area Connection 2: 


Node Ipfddress: [6.8.8.8] Scope Id: 


No names in cache 


{C:\Users\Richard> 


Microsoft Windows 


Ver - 2686) 
opyright <c) 2809 peers ie pordt lan. All rights reserved. 
=\Users\Richard> 


De fault Server: cns.bonitasprngs.f1.naples.comcast .net 


68 .87.74.166 
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Name 


-.---Realtek PCI GBE Family Controller 
--Realtek PCle GBE Family Controller 

Software Loopback Interface 1 Z 
e@ Microsoft ISATAP Adapter 

A eð Microsoft ISATAP Adapter #2 

eð Teredo Tunneling Pseudo- Interface 


IPv4 Route Table 
iit, maa 5 e AS 


etwork Destination Netmask Gateway Interface Metric 


0.0.8.0 0.0.0.0 192.168.1.1 192.168.1.108 10 
127.8.D.9 255.0.8.8 On-link 127.8.B.1 386 
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 

127.255.255.255 255. pees 255.255 On-link 127.0.0.1 306 
169.254.B.49 255.255.8.B On-link 192.168.1.1B0 286 
169.254.255.255 255.255.255.255 On - Link 192.168.1.108 266 
192.168.1.0 255.255.2556 On-link 192 .168.1.180 266 
192.168.1.108 255.255.255.255 On-link 192 .168.1.168 266 
192.168. 1. 255 265.255.255.255 On-link 192.168 .1.168 266 
. 240.0.0.0 On-link 127.0.0.1 346 
240.0.0.0 On-link 192.168.1.180 266 
e TEATE On-link 127.0.0.1 306 

255.255 SS On-1i 192. 168.1.188 


ersistent Routes: 
None 


el Route Table 


Active Routes: 
If Metric Network Destination Gateway 
58 E On-link 


7128 zink 
2001 : -732 On-lin 
2001 :0:4137:9e74:104b:b3d:51c5: Ñace/128 
On-link 


On-link 
eee 764 On-link 
fe8B::184b:b3d:51c5:bdcc/128 F 


On-link 
fe8B::79£4:0012:74b4:5£1/128 
On—link 
On-link 
On-link 
On-link 


fd 4b bt 
fd 50 da 


Realtek PCI GBE Family Controller 
Realtek PCle GBE Nati Controller 
.. -Software Loopback Interface 1 
BB BA BA BH el Microsoft ISATAP Adapter 
99 66 GB GA eð Microsoft ISATAP Adapter #2 
@6 BO OA AA eð Teredo Tunneling ` Pseudo-Interface 


SERIE CEDIDOS 


Netmask Gateway Interface Metric 

8.6.0.0 192.168.1.1 192.168.1.100 18 
255.0.0.0 On-link 127.0.0.1 

255.255.255.255 127.0.8.1 


127. 255. 255. -255 
169.254.0.0 
169.254.255.255 
192.168.1.8 
192.168.1.108 
1.255 


224.0.0.0 
255.255.255.255 
255.255.255.255 


255.255.255.255 
255.255.0.8 
255.255.255.255 
255.255.255.6 
255.255.255.255 
255. aT -255 255 


255.255. 255. -255 
255.255.255. 5 


081 : :732 On-link 
2001 :0: 14137: 9e74:104b: pon- aeni :bdcc/128 


fe80::/64 
fe809::/64 


o 
fe80::184b:b3d:51c5:bdcc/128 


£f009::/8 
££00::78 


f fO: 


None 


:\WUsers\Richard> | 
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ink 


On- link 
n-link 


On- link 
fe8B::79£4:0012:74b4:5f1/128 


On- link 
On- link 
On- Link 
On- link 


h. 


e o aa = 


Persistent Routes: 


127.0.8.1 
192.168.1.1908 
192.168.1.100 
192.168.1.100 
192.168.1.100 
192.168.1.100 

127.0.0.1 
192.168.1.198 

127.0.0.1 
192.168.1.100 


SS a SS 
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Interfaces 209.26.168.3% on Interface Ox2 

Internet Address ddress Type 

63.113. 142.181 20-53 dynemio 

63.113.142.181 ] 3-5 dynamic 
113-142-182 20-5 dyndmic 
113.147.183 20-53-5 fl dynamic 
113.142.184 20-53 dynamic 
113.142.185 ¿ 3 j dynamic 
113.142 _18 ¿ 5 dynamic 
$ 142.19 Į dynamic 
113.147.188 2 3-52 dynamic 

a 


113.142.189 2-43-00-00 dynamic 


192 bytes=32 time<ims 
192 bytes=32 time<ims | 
192 bytes=32 time<ims 
192 bytes=32 time<ims 


Command Prompt 


=\Users\Richard> 
orkstation Statistics for \\ACERLAPTOP 


Statistics since 3/31/2616 7:44:38 AM 


Bytes received 19662661 
Server Message Blocks (SMBs) received 136 
Bytes transmitted 

Server Message Blocks <SMBs> transmitted 

Read operations 

Write operations 

Raw reads denied 

Raw writes denied 


Network errors 
Connections made 
Reconnections made 
Server disconnects 


Sessions started 
Hung sessions 
Failed sessions 
Failed operations 
Use count 

Failed use count 


he command completed successfully. 


¿WNisersNRichard>,, 
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Name ____ ES 3 Date 
Period 


Designing and Installing 
a New Network 


Introduction 


For the Network+ Certification exam, you should be familiar with wiring distribution components 
such as patch panels, smart jacks, and 66 and 110 blocks and be able to recall horizontal cabling 
distances as defined in the ANSI/TIA/EIA TSB-75 standard. 


Practice 19.1 
Match the architectural design element to its definition. 


entrance facility a. The place where public or private 
telecommunications enter the building. 

b. The room that is used as the entrance location for 

main entrance room public or private communication cables. 

c. A room that contains the telecommunications 
equipment for the building such as the 

telecommunications room Private Branch Exchange (PBX), servers, and 
telecommunications wiring system terminations. 

d. The place where employees perform their normal 
office duties. 

e. A room or enclosed space that houses 
telecommunications equipment, such as cable 
termination and cross connect wiring, and serves as 
a transition point between backbone and horizontal 
wiring. 

f. An enclosed space that houses telecommunications 
cable termination equipment and is the recognized 
transition point between the backbone and 
horizontal wiring. 


equipment room 


telecommunications closet 


1 
2 
3 
4. 
5 
6 


. —_ work area 
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Practice 19.2 


Match the wiring and wiring connection point term to its definition. 


. 


NON og BONS 


00 


No] 


10. 


— backbone a. 
Consolidation Point (CP) b. 
demarcation point 
horizontal cross connect 
horizontal wiring 

—— Main Distribution Frame (MDF) 
Multi-User Telecommunication 

Outlet Assembly (MUTOA) AL. 

— — Network Interface Device (NID) 

—— Optical Network Terminal (ONT) . 
smart jack 

f. 
g. 
h. 


Practice 19.3 


Match the wiring and wiring connection point term to its definition. 


1. _____insulation-displacement connector a. 
(IDC) 
patch panel b 
3. ———— punch down block | 
4. _____ punch down tool 
e 
d. 
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A mechanical means of connecting horizontal 
cabling systems to other cables or equipment. 
The cable connection point where the private 
telecommunications cables come into a building 
and then connect or distribute to other areas 

in the building. It typically consists of a cable 
rack and physical cable connections for the 
individual cable conductors. 

The section of cable that runs from individual 
work areas to the telecommunications closet. 
Any device that connects the commercial 
carrier local loop to the private customer’s 
premises wiring. 

A cable that is located between the 
telecommunications closets, equipment rooms, 
and main entrance facility. 

The point where the customer equipment or 
cable meets the telecommunications provider 
cable or equipment. 

An intelligent connection point, which 
incorporates additional electronics that allow it 
to perform specific functions. 

A grouping of outlets that serves up to 12 work 
areas. 

A connection to the horizontal wiring system, 
which in turn feeds to a wall outlet or a MUTOA. 
A fiber-optic cable termination point between 
the customer and the service provider. It can 
provide multiple services such as telephone, 
television, and Internet access. 


A block of connections designed for terminating 
solid copper wire and typically consisting of 
insulation-displacement connectors. 

A type of network and telecommunications 
cable termination connector designed to remove 
the insulation of individual conductors while 
being inserted with a punch down tool. 

A tool used for pushing individual twisted pair 
wires into an insulation-displacement connector 
and automatically trimming conductor excess. 
A rack-mounted device that has RJ-45 jacks on 
the front and a matching series of connections 
on the back. 
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Name 


Practice 19.4 


Label the maximum allowable cable length, taking into consideration the following rules: 


UQ The overall length of the horizontal wiring is limited to 100 meters. 


OQ The horizontal run from the telecommunications outlet to the telecommunications room is 


limited to 90 meters. 
Q The length of a patch panel cable is limited to 7 meters. 


Horizontal wiring = 90 meters 
mA 


Patch cable = 7 meters 


Telecommunications + 
room Work area 


Horizontal wiring = 85 meters 


sous 
b IE any 


b. Patch cable = meters 


Telecommunications 
room Work area 


Horizontal wiring = 80 meters 


c. Patch cable =_______ meters 


e PODOOOON e 
Į 


Patch cable = 7 meters 


Telecommunications 
room 


Work area 
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d. Horizontal wiring = meters 
MUTOA 


Patch cable = 3 meters 


Patch cable = 3 meters 


Telecommunications 
room 


Horizontal wiring = 70 meters 
MUTOA 


OO! o 
J 


Patch cable = 7 meters 


Telecommunications 
room 


Horizontal wiring = 80 meters 


f. Patch cable = meters 


Telecommunications 
room Work area 


Practice 19.5 


Record the maximum backbone distance for each cable type. 


90 meters 800 meters 2000 meters - 3000 meters 


multimode fiber-optic cable: 
single-mode fiber-optic cable: 
UTP or STP (data): 


S 


WIP or SIP (voice); == a 
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m Instructions for 


Using the CompTIA 
Network+ Reference 


The CompTIA Network+ Reference is designed to help you study for the CompTIA 
Network+ Certification exam. This material can also be used as a reference when completing 
the practice exercises in the Chapter Review section of this Study Guide or when studying for a 
classroom exam. 

When using this section as a study guide, you may wish to approach your study by focusing 
on a topic or on a CompTIA Network+ objective. When focusing on a topic, be sure to review all 
related topics that are listed under Related Concepts. As you review the related topics, think about 
how they relate to the original topic. 

When focusing on the CompTIA Network+ objectives, refer to the Network+ objective listed 
at the bottom of each reference page. Network+ objectives are presented in order throughout 
this section. However, because some objectives cover multiple concepts and only one concept is 
presented per reference page, the same Network+ objective may be repeated on consecutive pages. 
For example, the CompTIA Network+ objective 2-1 states the following: 


2.1 Categorize standard cable types and their properties: Type (Cat 3, Cat 5, Cat 5e, Cat 6, STP, 
UTP; multimode fiber, single-mode fiber, coaxial, RG-59, RG-6, serial, plenum vs. non-plenum) 
and properties (transmission speeds, distance, duplex, noise immunity, frequency). 


Since this objective contains multiple concepts, the Study Guide devotes seven reference pages 
to this objective and thus repeats the Network+ objective 2-1 on the bottom of each page. The 
following are the titles of the reference pages for this objective: 


e Twisted Pair Cable 

SIE vs. UTP 

Fiber-Optic Cable 
Single-Mode and Multimode 
Coaxial Cable 

Coaxial Cable Types 
Plenum-Rated Cables 


Copyright by Goodheart-Willcox Co., Inc. Instructions for Using the CompTIA Network+ Reference 145 


Each reference page is identified with the CompTIA Network+ objective number and a letter 
from A to Z. This identification is located on the upper-right corner of each page. The letter A 
indicates the first topic related to the objective, the letter B indicates the second topic related to the 
objective, and so on. For example, the topics related to CompTIA Network+ objective 2-1 would be 
identified as follows: 


2.1A Twisted Pair Cable 

2MB STE UNR 

2.1C Fiber-Optic Cable 

2.1D Single-Mode and Multimode 
2.1E Coaxial Cable 

2.1F Coaxial Cable Types 

2.1G Plenum-Rated Cables 


Therefore, be sure to check consecutive pages for coverage of the same objective you are 
studying. When using this section, in general, feel free to highlight text, record notes, and add to the 
illustrations. This will help you to better remember the material presented. If you decide to take the 
CompTIA Network+ Certification exam, carry this Study Guide with you for a last minute review. 

These are just suggestions for using this section. This is your Study Guide. Use it in any way 
you feel it will be most effective. Be creative. For example, you may wish to choose a topic from the 
Table of Contents and then jot down everything you know about the topic. Then, you can compare 
your notes to the information presented in the reference section. You may even use the information 
presented to create your own study guide, arranging the information in a way that you can best 
remember it. 
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Networking Protocols 1.1A 


Description A networking protocol is a set of rules governing communication between 
devices on a network. 
Examples Networking i 
p > Functian 
rotocol 
ARP Resolves IP addresses to MAC addresses, 
DHCP Assigns IP addresses automatically to hosts on a network. 
DNS Associates a host or domain name with an IP address, making it easy 
to identify and find hosts and networks. 
HNE Supports file transfers between a client and server. Y 
HTTP(S) Used for communications between a Web browser and a Web server. 


The S at the end of “https” means that the connection is secure and is 
using either SSL or TSL as the security mechanism. 


ICMP Part of the TCP/IP suite of protocols. It provides the ability to 
remotely troubleshoot and monitor devices on network systems. 
IGMP Supports multicasting by informing a multicast router of the names F 


of the multicast group to which a host belongs. 


IMAP4 E-mail access protocol that can manipulate e-mail while it is on the 
mail server. It also allows a user to access his or her e-mail and then 
leave the e-mail on the server. 

NTP Synchronizes time between network devices. 


POP3 Simple e-mail access protocol designed to access a mail server and 
download e-mail to the e-mail client. 


RTP (VoIP) A standard and a protocol used to stream voice and video in real time. 


SIP (VoIP) A standard and a protocol for initiating, maintaining, and terminating 
the exchange of voice, multimedia, gaming, chat, and more. 


SMTP Transfers plain text e-mail from an e-mail client to a mail server and 
from a mail server to a mail server. 


SNMP2/3 Allows an administrator to manage and monitor network devices 
and services from a single location. 


SSH Provides secure network services over an insecure network medium 
such as the Internet. 


= 
O 
Y 


Connection-oriented protocol that ensures packets arrive intact and in 
correct order. Can break large amounts of data into smaller packets. 


TCP/IP suite | Developed by the Defense Advanced Research Project Agency 
(DARPA) in the early 1970s and was designed to support 
communications over the Internet. 


Telnet 


Allows a user to manipulate files on a Telnet server. 


A lightweight version of FTP that does not require the use of a user name 
and password because it uses UDP packets for transferring data. It allows 
a client to transfer files, but not to view the directory listing at the FTP site. 


Secures transactions between Web servers and individuals using the 
Internet for such purposes as credit card transactions. 


Connectionless protocol that establishes a link but does not ensure 
data is delivered correctly. Sends a single packet to transmit control 
information and data. 


UN 
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Related Port Numbers—1.2A IPv4 Address—1.3B 


Concepts IPv6 Address—1.3C DHCP Server—3.1K k 
DNS Server—3.2E ARP—5.1D 
SSH—6.5A HTTPS—6.5B 
SNMP—6.5C SFTP—6.5D 
HTTP—6.5F FTP—6.5G 
Network+ 1-1—Explain the function of common networking protocols: TCP, FTP, UDP, 
Objective Wer /iPsmre, DHCP, TETE DNS, HITTERS), ARP, SIP(VOIP), RIP (VoIP) ssi 


POP3, NTP, IMAP4, Telnet, SMTP, SNMP2/3, ICMP, IGMP, and TLS. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Port Numbers q 


A port number is a number that is associated with the TCP/IP protocol and 
used to create a virtual connection between two computers running TCP/IP. 


Port # Service | : Description 


Echo a reply 


File Transfer Protocol data 


File Transfer Protocol control commands 
Secure Shell 


Terminal emulation connection 


Simple Mail Transfer Protoco 
Who Is 
Login Host Protocol 


Domain Name Server 


3389 Windows Remote Desktop | Remote access to desktops 


Networking Protocols—1.1A DHCP Server—3.1K 
DNS Server—3.2E SSH—6.5A 
HTTPS—6.5B SNMP—6.5C 
SFTP—6.5D HTTP—6.5F 
FTP—6.5G 


1-2—Identify commonly used TCP and UDP default ports: TCP ports (FTP-20, 21; 
SSH-22; Telnet-23; SMTP-25; DNS-53; HTTP-80; POP3-110; NTP-123; IMA P4-143; 
HTTPS-443) and UDP ports (TFTP-69; DNS-53; BOOTPS/DHCP-67; SNMP-161). 


Ne) 
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1.3A MAC Address 


Description A MAC address is a six-byte, hexadecimal number that uniquely identifies a 
network card. It is also called a physical ID or address. The first three bytes 
identify the network interface card's manufacturer, and the second three bytes 
uniquely identify the card. 


Examples Six-byte hexadecimal number 

y CO ii 2B 14 C5 

| 

Manufacturer Unique NIC 

identification identification 
cee Networking Protocols—1.1A VLAN—2.7D 

n 
asad aa NIC—31D Data Link Layer—4.1G 
ARP—5.1D Media Access Control Filter—6.3A 

Network+ 1.3—Identify the following address formats: IPv6, IPv4, and MAC addressing. 
Objective 
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IPv4 Address -1.3B 


Description An IPv4 address consists of four octets of binary numbers. These octets can be 
written in decimal form. 


Examples IPv4 


Four octets 


0011110.00111100.00010111.10011010 


Octet 
IP Address in Binary Form 
30.60.23.154 
IPv4 Decimal Form 
Related Subnetting—1.4A Classful (IPv4) Addresses—1.4B 
Concepts NAT—14D Public and Private IP Addresses —1.4E 
DHCP—1.4F Network Layer—4.1F 

Network+ 1.3—Identify the following address formats: IPv6, [Pv4, and MAC addressing. 


Objective 
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1.3C IPv6 Address 


Description An IPv6 address consists of 128 bits. The 128 bits are divided into 8 units 
of 16 bits. These units can be represented as a 4-digit hexadecimal number 
separated by colons. 


Examples The IPv6 addressing scheme. 


The 128-bit IPv6 address is divided into eight 16-bit blocks each separated by a colon: 
FE80:0000:0000:0000:4DE1:F01B:80FA:CCA3 


A single 16-bit block containing all zeros can be expressed as a single zero: 


FE80:0:0:0:4DE1:F01B:80FA:CCA3 


A series of 16-bit blocks containing only zeros can be expressed as a simple double colon: 


FE80::4DE1:F01B:80FA:CCA3 


Only one double colon can be used in an IPv6 address: 


FE80:0:0:0:A23D:0:0:CCA3 
FE80::A23D:0:0:CCA3 


Using a double colon more than once is illegal!! 


Incorrect: FE80::A23D::CCA3 


Related Classless (IPv6) Addresses—1.4C 


Concepts Unicast, Multicast, Anycast, and Broadcast—1.4G 


Network Layer—4.1F 


Network+ 1.3—Identify the following address formats: IPv6, IPv4, and MAC addressing. 
Objective 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Subnetting < LAA 


Dividing a network into subnetworks, or subnets, is called subnetting. A subnet 
is a network created by borrowing bits from the host portion of an assigned 
network IP address. Subnetting allows multiple networks and host ranges to 
be created from a single, assigned IP address. 


Assigned IP address: 130.200.86.64 


Class B 
subnet mask: 255.255.000.000 Three bits 


borrowed 
Extended | d from host 
Class B 


subnet mask: 255.255.224.000 11111111.11111111.11100000.00000000 


Network 


Binary patterns of } 011 | Eight possible 
the newly created | 100 f binary patterns 


six subnets 101 
110 
IL 
Subnet Network Address Host Range Broadcast Address 
130.200.32.0 130.200.32.1 - 130.200.63.254 130.200.63.255 
130.200.64.0 130.200.64.1 - 130.200.95.254 1902001951255 
130.200.96.0 130.200.96.1 - 130.200.127.254 130.200.127.255 
130.200.128.0 130.200.128.1 - 130.200.159.254 130:200.159255 
130.200.160.0 130.200.160.1 - 130.200.191.254 130.200.191.255 
130.200.192.0 130.200.192.1 - 130.200.223.254 130.200.223.255 


IPv4 Address—1.3B 
Classful (IPv4) Addresses—1.4B 


1.4—Given a scenario, evaluate the proper use of the following addressing 
technologies and addressing schemes: Addressing technologies (subnetting, 
classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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1.4B 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Classful (IPv4) Addresses 


For the purpose of assigning IPv4 addresses, networks are divided into three 
major classifications: Class A, Class B, and Class C. Large networks are assigned 
a Class A classification. A Class A network can support up to 16 million hosts 
on each of 127 networks. Medium-sized networks are assigned a Class B 
classification. A Class B network supports up to 65,000 hosts on each of 

16,000 networks. Small networks are assigned a Class C classification. A Class C 
network supports 254 hosts on each of 2 million networks. 


Number of Hosts 


16,000,000 


Class Number of Networks 


Class B 
Class C 


IPv4 Address—1.3B Subnetting—1.4A 
NAT—14D Public and Private IP Addresses—1.4E 
DHCP—1.4F Network Layer—4.1F 


128-191 
192-223 


16,000 
2,000,000 


1.4—Given a scenario, evaluate the proper use of the following addressing 
technologies and addressing schemes: Addressing technologies (subnetting, 
classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Classless (IPv6) Addresses 1.4C 


IPv6 is referred to as a “classless IP addressing scheme” because there is no 
need for a subnet mask based on network class. IPv6 has been designed to not 
use a separate subnet mask, but it does use a prefix, which serves the same 
purpose as the IPv4 subnet mask. An IPv6 prefix is the portion of the address 
with a fixed value that informs network devices of what action to take. The 
IPv6 prefix is expressed as address/prefix. For example, FE80::/64 means that 
the first 64 bits represent the network address. You will see IPv6 addresses 
expressed in both forms: the entire IPv6 address or the Classless Inter-Domain 
Routing (CIDR). 


Prefix 
2000::/3 
FE80::/10 
FC08::/10 
FD08::/8 Unique-local unicast 
FFO0::/8 Multicast 


FFO1::1 Interface multicast local all nodes 
FFO2::1 Link-local multicast all nodes 
FFO1::2 Interface-local multicast all routers 


Address Type 


Global unicast 


Link-local unicast 


Site-local unicast 


FF02::2 Link-local multicast all routers 
FFO5::2 Site-local multicast all routers 


IPv6 Address—1.3C 
Unicast, Multicast, Anycast, and Broadcast—1.4G 
Network Layer—4.1F 


1.4—Given a scenario, evaluate the proper use of the following addressing 
technologies and addressing schemes: Addressing technologies (subnetting, 
classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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ap. © NAT 


Description Network Address Translation (NAT) is a protocol used to translate private 
network addresses into an assigned Internet address, and vice versa. NAT 
was especially designed for implementing private network configurations. It 
allows an unregistered private network address to communicate with a legally 
registered IP address. The three main advantages of using NAT are that NAT: 
e Provides a firewall type of service by hiding internal IP addresses 
e Allows computers on a network to share one common IP address to 
access the Internet without the need of multiple IP addresses to be 
assigned to the subnetwork 
e Allows multiple ISDN connections to be combined into one Internet 


connection 
Exam ples Router with NAT 
translates private IP 
addresses into an Assigned IP 
assigned IP address address: 


and vice versa. 


XXX.XXX.XXX.XXX 


19291689103 m 192.168.10.4 


a IPv4 Address—1-3B Subnetting—14A 
once Classful (IPv4) Addresses—1.4B Public and Private IP Addresses—1.4E 
DHCP—1.4F Network Layer—4.1F 
Network+ 1.4—Given a scenario, evaluate the proper use of the following addressing 
Obj ective technologies and addressing schemes: Addressing technologies (subnetting, 


classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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Public and Private IP Addresses 1.4E 


Description A number of IPv4 addresses are reserved for private networks. They are often 
used for offices sharing an Internet address or for experimentation. They are 
not valid for use as a direct connection to the Internet. 


Examples Range Number of Networks Number of Hosts 


127 16,000,000 


Class B 128-191 16,000 65,000 
Class C 192-223 2,000,000 254 


Private IP Addresses 


Subnet Mask 
10.0.0.0-10.255.255.255 
172.016.0.0-172.031.255.255 259255 U0 


192.168.0.0-192.168.255.255 255.255.255.0 


Related IPv4 Address—1.3B ea ieee 
Concepts Router—3.11 

Network+ 1.4—Given a scenario, evaluate the proper use of the following addressing 
Objective technologies and addressing schemes: Addressing technologies (subnetting, 


classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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1.4F 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


DHCP 


Dynamic Host Configuration Protocol (DHCP) is a service that assigns IP 
addresses automatically to the hosts on a network. The IP address is randomly 
selected from a pool of addresses. The temporary IP address is returned to the 
pool when the lease expires. 


Station] 


Static IP address 
Serverl pei 


195.102.100.001 
| 195.102.100.002 
= 195.102.100.003 
| 
| 
| 


195.102.100.004 


Station2 
195.102.100.003 195.102.100.005 | Pool of IP addresses 
EA 195.102.100.006 NS duramicall 
ee | 195102100007 [ya y 
| = by the DHCP server 


DHCP Server 195.102.100.008 
195.102.100.009 
195.102.100.010 
195.102.100.011 


Station5 
195.102.100.006 


El 


Each workstation receives a temporary IP address from the DHCP server 


IPv4 Address—1.3B Classful (IPv4) Addresses—1.4B 
DHCP Server—3.1K 


1.4—Given a scenario, evaluate the proper use of the following addressing 
technologies and addressing schemes: Addressing technologies (subnetting, 
classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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Unicast, Multicast, Anycast, and Broadcast 1.4G 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


There are three broad classifications of IPv6 addresses: unicast, multicast, and 
anycast. A unicast address delivers packets to a single network address. A multicast 
address delivers packets to multiple addresses. An anycast address delivers packets 
to the nearest interface and is used mainly for supporting router functions. IPv4 
uses broadcast and multicast addresses to distribute packets. A broadcast address 
sends packets to all network addresses. When messages are broadcast to all 
network nodes, a pattern of all ones is used in the destination address. 


IPv6 Network Classifications 


Link-local Unique-local 


Global 
Internet 


OO 


IPv6 Address Prefixes 
Prefix Address Type 


Interface-local multicast all routers 


FFO2::2 Link-local multicast all routers 
FFO5::2 Site-local multicast all routers 


IPv6 Address—1.3C Classless (IPv6) Addresses—1.4C 
Common IPv4 and IPv6 Routing Network Layer—4.1F 
Protocols—1.5A 


1.4—Given a scenario, evaluate the proper use of the following addressing 
technologies and addressing schemes: Addressing technologies (subnetting, 
classful vs. classless, NAT, PAT, SNAT, public vs. private, DHCP) and 
addressing schemes (unicast, multicast, broadcast). 
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1.54 Common IPv4 and IPv6 Routing Protocols 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Two basic IPv4 and IPv6 routing protocol classifications are Interior Gateway 
Protocol (IGP) and Exterior Gateway Protocol (EGP). Two additional 
classifications are link state and distance vector. 


Routing Protocol 
Comment 


Exchanges routing 
information between 

different autonomous 
networks. 


EGP | Exchanges routing 
information between 
different autonomous 


networks. 


E 
= 
= 
y 
~ 
- 
— 
= 
SS 
- 
- 
F. 


it 
Autonomous nuiywork) 


EGP 
Aiora thon 


(Excharute 


EIRGP | Guarantees loop-free 
operation. Cisco 
advertises EIGRP as a 
link state protocol and a 


distance vector protocol 


Allows a maximum 
hop count of 255 and 
uses a metric based on 
bandwidth, latency, route 
traffic, and reliability. 
IS-IS | Detects router types as 
level 1 or level 2 when 
determining shortest route. 


IRGP 


OSPF | Can detect network 
link failures and then 
automatically determine 
next best path. 


RIP Supports a maximum of 
15 hops. 


RIPng | IPv6 version of RIP. 


between diHero 
autononióss networks) 


Link State Protocol 
(Only transfers information 
abuul connections, and 
does not pass its routing 
table to other devices) 


with otier routers) 


Distance Vectar Protocol 
(Shares its routing table 


IGP vs. EGP—1.6A 


x 
x 


x 


1.5—Identify common IPv4 and IPv6 routing protocols: Link state (OSPF, IS-IS), 


distance vector (RIP, RIPv2, BGP), and hybrid (EIGRP). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


_ IGP vs. EGP y = 16A 


Two basic routing protocol classifications are Interior Gateway Protocol (IGP) 
and Exterior Gateway Protocol (EGP). IGP is confined to an autonomous 
network. EGP exchanges information between different autonomous networks. 


Examples of IGP are RIP, IGRP, OSPF, and IS-IS. Examples of Exterior Gateway 
Protocol are BGP and EGP. 


Routing Protocol 


Confined to an autonomous network Exchanges information 
between different 
autonomous networks 


Common IPv4 and IPv6 Routing Protocols—1.5A 


1.6—Explain the purpose and properties of routing: IGP vs. EGP, static vs. 
dynamic, next hop, understanding routing tables and how they pertain to path 
selection, and explain convergence (steady state). 
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1.6B 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Static vs. Dynamic 


Routers can be programmed to operate from static IP address tables or dynamic 
IP address tables. A static IP address table contains addresses that are entered 
manually. A dynamic IP address table contains addresses that are generated 
automatically by a software program that communicates with nearby routers. 


Addresses are 


Addresses are generated E it 
automatically by a Mig 
entered manually y by Hee 
software program 
Static IP address that communicates K 
table 


with nearby routers 


Next Hop—1.6C Routing Tables—1.6D Convergence—1.6E 
Router—3.11 Route—5.1G 


1.6—Explain the purpose and properties of routing: IGP vs. EGP, static vs. 
dynamic, next hop, understanding routing tables and how they pertain to path 
selection, and explain convergence (steady state). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Next Hop 1.6C 


Hop is a measure of how many network devices, such as routers and 
gateways, a packet must pass through until it reaches its destination. The hop 
is the oldest and most basic metric used for determining the best route. When 
you issue a tracert command, you will see the number of hops that the tracert 
packet has passed through to reach its final destination. 


Number of hops the tracert 
packet passed through to 
reach the final destination 


~~ Losmmará Prompl 


¿WsersNRichard>tracert www.comcast.net 


Tracing route to a 6.9. akamai.net 196.17.75.251 
pver a maximum of 


192.168 .1.1 

73.17.116.1 
.sebring-f1.westfl.comcazt.net [68.86.199.77] 
-arcadia.fl.westfl.comcast.net [68.87.238.185) 
portchar lott .fl.westfl.comcast.net [(68.87.238.1B11 
-horthport .f L.westfl.comcast.net [68. me ah a 
.venice.f1.westfl.comcast.net [68.87.2 
.bonitasprngs.fl.naples.comcast.net iea. ae 29. 2471 
-bonitasprngs.fl.naples.comcast.net [68.87.236.106 

te-9-2-85-ar83 .northdade .f1.pompano.comcast.net 168. 85.229. 5531 

pos-9-5-8-8-crBl .miani.fl.ibone.comcast.net [68.86.91. 

ct A e “atlanta. ga.ibone.comcast.net (68.86.85.193 

pos8-2-8WB-—pe0B1-56marietta.ga.ibone.comcast.net 168.86. pe 1661 
per 17-75-25. ey: akamaitechnologies.com [96.17.75.25 


ms 
nn. 
na 
ms 
ms 
ms 
ms 
ms 
re 
na 
ms 
ne 
e. 
RS 


2223 2222222330 


Trace complete. 
:WsersNRichard>,, 


Routing Tables—1.6D Convergence—1.6E Router—3.11 
Traceroute /Tracert—5.14 Route—5.1G 


1.6—Explain the purpose and properties of routing: IGP vs. EGP, static vs. 
dynamic, next hop, understanding routing tables and how they pertain to path 
selection, and explain convergence (steady state). 
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1.6D Routing Tables 


Description The routing tables contain information about the other routers and networks. 
This information is processed by the router and then used to determine the 
best route to send the packet to its final destination. 


The router metric 
is used to determine 
the best route 


Examples 


Interface List 
13...80 26 18 fd 4b bi Realtek PCI GBE Family Controller 
O 26 18 fd 58 da Realtek PCIe GBE Family Controller 
Software Loopback Interface 1 


90 OO OA eð Microsoft ISATAP Adapter #2 
BB ØB OO eð Teredo Tunneling Pseudo—Interface 


ctive Routes: 
etwork Destination Netmask Interface 
9.0.0.0 0.0.0.B 2 
127.8.9.6 255.0.0.9 
127.0.0. AAA AE 
127.255.255. 255.255.255.255 
169.254.898. 255.255.0.8 
169.254.255. 255.255.255.255 
192.168.1. 255.255.255.0 
192.168.1.1088 255.255.255.255 
192.168.1. 259.495.299 
224.0.0. 240.0.0. 


15) 


N 
horarios 


224.0.0.0 240.0.0. 
255 .255.25572 255.255.255. 
255.295.255. AA DO 


ersistent Routes: 


JiPu6 Route Table 


‘Active Routes: 
Y If Metric Network Destination Gateway 


4 I 
$ 58 :: On-1link 
1 521/12) i 
2001 : :732 On-link 
2001 :8:4137:9e74:184b:b3d:51c5:bdcc/128 
On-link 


::/64 On-link 

1:764 On-link 

::184b:b3d:51c5:bdcc/128 
link 


Ace Static vs. Dynamic—1.6B Next Hop—1.6C Convergence—1.6E 
oncepts Router—3.11 Route—5.1G 


Network+ 1.6—Explain the purpose and properties of routing: IGP vs. EGP, static vs. 
Objective dynamic, next hop, understanding routing tables and how they pertain to path 
selection, and explain convergence (steady state). 
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Convergence 1.6E 


Description With dynamic routing, tables are constantly changing. When all dynamic 
routing tables contain the same information, a state of convergence is said to 
exist. Convergence is also referred to as steady state. 


Examples 

All dynamic routing tables contain the same 

information 

Routers are in state of convergence 
Related Static vs. Dynamic—1.6B Next Hop—1.6C Routing Tables—1.6D 
Concepts Router—3.11 Route—5.1G 
Network+ 1.6—Explain the purpose and properties of routing: IGP vs. EGP, static vs. 
Objective dynamic, next hop, understanding routing tables and how they pertain to path 


selection, and explain convergence (steady state). 
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1.7A 802.11 a/b/g/n 


Description Radio wave-based networks adhere to the 802.11 standard. The 802.11 standard 
consists of four classifications of wireless networks: 802.11a, 802.11b, 802.11g, 


and 802.11n. 


Examples 802.11 Radio Frequency Data Rate = Range : Transmission 
Standard Frequency Range (approximate) Method 
802.11a 5 GHz 5.15'GHz- 

5.825 GHz 


124 GHz— 
2.4835 GHz 


802.11b 2.4 GHz 


802.11g 2.4 GHz 2.4 GHz- 1 Mbps 100 m DSSS 
2.4835 GHz | 2 Mbps 
5.5 Mbps 
11 Mbps 
5 GHz 5.15 GHz- | 54 Mbps 50 m OFDM 
5.825 GHz i 
802.11n 2.4 GHz 2.4 GHz- |All previous | 300m OFDM 
2.4835 GHz | data rates up 
SA eee 
and possibly 
5.825 GHz las high as 
600 Mbps 
Related Authentication—1.7B 802.11x and RADIUS—1.7C 
Concepts Encryption—1.7D Wireless Channels—1.7E 
Wireless Access Point—3.1H Wireless Access Point Placement—3.4A 
Wireless Access Point AAA—6.4C 
Configuration—3.4B 
RADIUS—6.4D TACACS+—6.4E 
802.1x—6.4F EAP—6.4H 
= ee A ETA eee 
Network+ 1.7—Compare the characteristics of wireless communication standards: 
Objective 802.11 a/b/g/n (speeds, distance, channels, frequency) and authentication 


and encryption (WPA, WEP, RADIUS, TKIP). 
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Authentication 1.7B 


Descri ption Authentication is the process used to identify a user and ensure the user is who 
he or she claims to be. Wireless device authentication can be achieved in more 
than one way. The IEEE 802.1x draft standard provides a means for a client and 
server to authenticate with each other. Wi-Fi Protected Access (WPA) provides both 
authentication and encryption for wireless devices. Wi-Fi Protected Access 2 (WPA2) 
is an enhanced version of WPA. TKIP improves wireless security by constantly 
changing the security key rather than leaving it the same for all packets. 


Examples 
Status Wireless Wired Interfaces DHCP IPAddress Allocation Statistics 
i. | Warning Modifying the settings on this page can impact the ability of devices to access your wireless 
: ( y network 
Wireless Interface 
E Wireless Interface {Enabled [æ] Default: Enabled 
' i Wi-Fi Protected Setup Status: idie 
| [Enabled [æ] - Default: Enabled 
Enter WPS PIN y 
Push WPS Button Remotely 
4 — Authentication 
E type options 
Network Name (SSID) 2WIRE161 Default: 2MIRE161 
| SSID Broadcast [Enabled [y Default: Enabled 
Wireless Channel [Auto [e] Default: Auto 
Current Wireless Channel 11 
o zen Channel Cuescan]) 
Authentication 
Security type set on 
Wireless Security [Enabled [=] Default: Enabled lel router / WAP 
port co o 
Wireless Key ted on the System Label 
Related 802.11 a/b/g/n—1.7A 802.11x and RADIUS—1.7C 
Concepts AAA—64C RADIUS—6.4D 
TACACS+—6.4E 802.1x—6.4F 
EAP—6.4H 
Network+ 1.7—Compare the characteristics of wireless communication standards: 
Ob j ective 802.11 a/b/g/n (speeds, distance, channels, frequency) and authentication 


and encryption (WPA, WEP, RADIUS, TKIP). 
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wie 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


802.11x and RADIUS 


802.1x is used for client/server-based networks. It allows the network server 


to authenticate a wireless network device when the wireless network device 
attempts to connect to the wired network through a WAP. 802.1x requires 

three components: supplicant, authenticator, and authentication server. The 
supplicant is the wireless network device that is requesting network access. 
The WAP functions as the authenticator and does not allow any type of access 
to the network without proper authentication. A server running Remote 
Authentication Dial-In User Service (RADIUS) acts as the authentication server. 


Authentication server 

ie a. 

(2 | 

¡e == Server with 
Ti RADIUS 

| AUN || installed 

IHL 


Wired Network 


Supplicant 


Authenticator | | 
Laptop with S 
wireless network 
device Wireless Access Point 
802.11 a/b/g/n—1.7A Authentication—1.7B 
Client/Server —2.7B AAA—6.4C 
RADIUS—6.4D 802.1x—-6.4F 


1.7—Compare the characteristics of wireless communication standards: 
802.11 a/b/g/n (speeds, distance, channels, frequency) and authentication 
and encryption (WPA, WEP, RADIUS, TKIP). 
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| Encryption e 


Description Encryption is the method of using an algorithm to encode data. Wired 
Equivalent Privacy (WEP) was the first attempt to secure with encryption the 
data transferred across a wireless network. Wi-Fi Protected Access (WPA) uses 
a more complex encryption technique to protect data than WEP. It provides 
both authentication and encryption for wireless devices. Wi-Fi Protected 
Access 2 (WPA2) is an enhanced version of WPA. 


Examples 

Searity type: [WPA2-Personal 

Encryption type: [AES 

Network security key ..ooso..o 

[L] Show characters 
a 802.11 a/b/g/n—17A 
oncepts 

Network+ 1.7—Compare the characteristics of wireless communication standards: 
Objective 802.11 a/b/g/n (speeds, distance, channels, frequency) and authentication 
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and encryption (WPA, WEP, RADIUS, TKIP). 
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1.7E 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Wireless Channels 


The bandwidth of a carrier wave is referred to as a channel. A channel is 
identified by the assigned frequency that represents the starting point of the 
band. The default wireless channel, or dedicated frequency, varies according to 
manufacturer. In the United States, the FCC has assigned 11 wireless channels 
for use with wireless devices. Each wireless device in the wireless network 
should be assigned the same channel. When wireless devices automatically 
configure themselves, they assign a specific channel to themselves. You can 
manually assign the wireless channel if necessary. For example, a specific 
channel may be experiencing radio interference, resulting in very low data 
speeds or not connecting at all. You can sometimes overcome the effects of the 
radio interference by changing the assigned channel. 


Status Wireless Wired interfaces DHCP iP Address Allocation Statistics 


À Warning Modifying the settings on this page can impact the ability of devices to access your wireless 
network. 


Wireless Interface 


Wireless interface 


Status: idle 


Enter WPS PIN 


Defauk: Enabled 
Wi-Fi Protected Setup 
Defautt: Enabled 


Push WPS Burton Remotely Push-8) 


[| Network 


Network Name (SSID) ZWIRE161 


¡Enabled 


Default: 2WIRE161 
SSID Broadcast 
Wireless Channel 


Default Enabled 


Default: Auto 
Current Wireless Channel 


Check Wireless Channel 

Availability 
| Wireless 
El Security channels 


Wireless Security Default. Enabled 


Default WPA-PSK (TKIP) and 
WPA2-PSK (AES) 


Authentication Type [11 (2462 MHZ) | Ing WPA2-PSK (AES) |] 


802.11 a/b/g/n—1.7A 


Wireless Access Point Wireless Access Point 
Placement—3.4A Config uration—3.4B 


oe 


Wireless Access Point—3.1H 


1.7—Compare the characteristics of wireless communication standards: 
802.11 a/b/g/n (speeds, distance; channels, frequency) and authentication 
and encryption (WPA, WEP, RADIUS, TKIP). 
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Twisted Pair Cable 


2.1A 


Description There are seven categories of twisted pair cable: Category 1 through Category 7. 
The categories are based on the physical design, such as the number of pairs or 
twists per foot, and the capabilities of the cable, such as the maximum frequency 
rating and the data rate. The maximum frequency rating and data rate are only 
two measurements of a cable’s capabilities. Other measurements to consider are 
crosstalk, NEXT, and impedance. 


Examples 
Category 


Category 1 


Category 2 


Maximum | 
Frequency 
Rating 


Number 


Data Rate of Fakes 


Less than 
1 Mbps 


Comments 


Used for electrical signals 
representing voice 
transmission. 


Category 3 


Category 4 


Category 5 


Category 5e 


100 MHz 


Category 6 


Category 6a 


250 MHz 


500 MHz 


4 Mbps 


T 
Used in earlier networks 


that were limited to 4 Mbps. 


Can be found in existing 
networks rated at 10 Mbps 
and 16 Mbps and in some 
telephone installations. 


This cable type was only 
a slight improvement over 
Category 3. 


100 Mbps 
1000 Mbps 
(using 4 pairs) 
100 Mbps 
1000 Mbps 
(using 4 pairs) 


Category 7 


600 MHz 


Note: NS = No standard. 
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Commonly used in 
10BaseT and 100BaseTX 
network installations. 


This cable type is not 

a replacement for the 
Category 5 cable. It is an 
addendum to the cable 
classification. 


Has a plastic spine used to 
separate the conductors. 


Introduced AXT. 


Each pair of twisted 
conductors is protected by 
foil shielding. Then, all four 
pairs are surrounded by 
foil or braided shielding. 


CompTIA Network+ Reference . 171 


Related STP vs. UTP—2.1B Network Connector Types—2.2A 
Concepts 


568A and 568B—2.4A Straight-Through, Crossover, and 
Rollover—2.4B 
802.3 Copper Cable Backbone—2.8C 
Classifications—2.6A 
Patch Panel—2.8D 66 and 110 Block—2.8E 
Wiring Termination—2.8K Physical Layer—4.1H 
Troubleshooting Connectivity Network Hardware Tools—5.3A 
Issues—4.7A 
Network+ 2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Objective Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 


RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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STP vs. UTP | 2.115 


Description Twisted pair cable can be labeled as UTP (unshielded twisted pair) and 
STP (shielded twisted pair). Shielding can be applied over the entire cable 
assembly or over individual pairs of conductors. When shielding is applied 
to individual pairs of conductors, the shielding protects against crosstalk and 
outside sources of interference. 


Examples Conductor pair Insulating jacket > \ Shield 
he Pi aaa / Insulating jacket 
Conductor pair 

Unshielded Twisted Shielded Twisted 

Pair (UTP) Pair (STP) 
j Twisted Pair Cable—2.1A Troubleshooting Connectivity Issues—4.7A 

oncepts 

Network+ 2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Obj ective Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 


RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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2.1C Fiber-Optic Cable . 


Description Fiber-optic cable consists of a glass or plastic core that carries pulses of light. It 
is primarily used for network backbones and long-distance runs. 


Examples 
Agee Single-Mode and Multimode—2.1D Network Connector Types—2.2A 
oncepts 802.3 Fiber-Optic Classifications—2.6B Backbone—2.8C 
Physical Layer—4.1H Network Hardware Tools—-5.3A 
Network+ 2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Obj ective Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 


RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Single-Mode and Multimode 2.1D 


The two broad classifications of fiber-optic cable based on the diameter 

of the core are multimode and single-mode. Multimode fiber-optic cable 

has a larger core diameter than single-mode fiber-optic cable. A larger core 
diameter causes more light loss due to dispersion. Single-mode fiber-optic 
cable is much smaller in diameter than multimode cable. The diameter of 
single-mode fiber-optic cable is almost equal to the length of the light wave 
traveling through the cable. Because the core is designed to closely match the 
wavelength of the light wave, the light wave cannot readily disperse as it does 
in a large diameter core. The result is single-mode fiber-optic cable can carry 
light farther than multimode fiber-optic cable. 


9 um 125 um 


Single-mode fiber-optic cable has a small diameter and 
supports one light path. 


Cladding 


Multimode 62.5um  125um 


Core 


— y Sa 


Multimode fiber-optic cable has a large diameter, causing 
multiple paths of light to be transmitted. 


Fiber-Optic Cable—2.1C 


2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 
RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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2.1E Coaxial Cable 


A 


Description Coaxial cable, or coax, consists of a copper core conductor surrounded by an 
insulator referred to as a dielectric. The dielectric is covered with two shields: 
a foil shield and a braided copper shield. The shields protect the core from 
electromagnetic interference (EMI). The shields also prevent the cable from 
transmitting EMI to other cables. The entire cable assembly is covered by an 
insulating outer jacket, which protects the shielding. 


Examples 
„~ Braided copper 
i sitet 
pá Foil shield 
Divteziru — i a Uopper 
lalo: 
outer jacket 
Related Coaxial Cable Types—2.1F Network Connector Types—2.2A 
Concepts Physical Layer—4.1H Network Hardware Tools—5.3A 
Network+ 2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Objective Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 


RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Coaxial Cable Types 2.1F 


There are several classifications of network coaxial cable. RG-6 has become the 
standard for Cable television (CATV) systems and satellite systems, replacing 
other types of cable such as RG-59 for new installations. 


Common ini Actual Size 
Name pecance in Diameter 


Broadband 7O 0.332 Used for Cable TV. 


Cable Description 
G 


RG-8 | Thicknet 50 Q 0.405 Used for Ethernet 
networks. 


RG-11 75 Q Used for Cable TV 
trunk lines. 

RG-58 | Thinnet 50 Q Used for Ethernet 
networks. 

RG-59 | CATV 750 Used for Cable TV and 


sometimes used for 
ARCnet. 


RG-62 | Baseband 93 Q 0.249 Used for ARCnet. 


Coaxial Cable—2.1E Network Connector Types—2.2A 
Physical Layer—4.1H Network Hardware Tools—5.3A 


2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 
Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 
RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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2.1G Plenum-Rated Cables q 


Description Cables are often identified as plenum-rated. Plenum-rated means that the 
cable has a special type of insulation that will not give off toxic gases should 
the cable be consumed by fire. The term plenum-rated is derived from the 
plenum in a building. The plenum is the area above a drop ceiling and under 
a raised floor. Cables designed to pass through a building plenum must be 
plenum-rated. 


Corrugated 
E xam p l es AVANAN ANAN ANTANT AAT T T TT 5 


Plenum area 


SS Ceiling tile 


Raised floor 


Plenum area 


= 


Concrete slab 


eee Twisted Pair Cable—2.1A Fiber-Optic Cable—2.1C 
oncepts Coaxial Cable—2.1E Coaxial Cable Types—2.1F 

Network+ 2.1—Categorize standard cable types and their properties: Type (Cat 3, Cat 5, 

Obj ective Cat 5e, Cat 6, STP, UTP, multimode fiber, single-mode fiber, coaxial, RG-59, 


RG-6, serial, plenum vs. non-plenum) and properties (transmission speeds, 
distance, duplex, noise immunity, frequency). 
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Network Connector Types 2.24 


Description Network connectors attach to network media, such as coaxial cable, twisted 
pair cable, and fiber-optic cable, and are used to join the network media to a 
network device. 


Examples Twisted Pair 


Plastic hatising 


RIAS Connector 


Coaxial Cable 


F-type 


connector i 


INC avro li 


MNL ts 
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Fiber-Optic Cable Connectors 


ae Twisted Pair Cable—2.1A Fiber-Optic Cable—2.1C 

ONE Coaxial Cable—2.1E Coaxial Cable Types—2.1F 
Network+ 2.2—Identify common connector types: RJ-11, RJ-45, BNC, SC, ST, LC, and RS-232. 
Objective 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Network Topologies 2.3A 


The physical arrangement of computers, computer-related devices, 
communication devices, and cabling in a network is referred to as 

network topology. The four major topologies are bus, ring, star, and mesh. 
Combining two or more of the four major topologies creates a hybrid topology. 
Point-to-point topology generally refers to two nodes connected directly 

to each other either by cable or by wireless means. A point-to-multipoint 
topology is when one node is connected directly to two or more nodes. 


we OLR 


Ring Star 
Tree 
Hierarchical 
Hybrid 
Hub—3.1A Switch—3.1F 


Wireless Access Point—3.1H 


2.3—Identify common physical network topologies: Star, mesh, bus, ring, 
point-to-point, point-to-multipoint, and hybrid. 
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2 4A 568A and 568B 


Description The two main cable termination standards in use for twisted pair cable are 
568A and 568B, as described by the TIA/EIA organization. Either standard 
can be used to make a straight-through cable, as long as the cable ends use the 
same standard. A crossover cable is created by using the 568A standard on one 


end and the 568B standard on the other. 


Examples 
The difference between a 
568A and 568B connection 
is the position of cable 
pairs 2 and 3. 

568A : 568B 
ae Straight-Through, Crossover, and Rollover—2.4B Patch Panel—2.8D 
a oi 66 and 110 Block—2.8E 
Network+ 2.4—Given a scenario, differentiate and implement appropriate wiring 
Objective standards: 568A, 568B, straight vs. crossover, rollover, and loopback. 
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Straight-Through, Crossover, and Rollover 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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2.4B 


UTP cables have two common classifications of assembly: straight-through 
and crossover. A rollover cable is a special cable in which the pin order is 
completely reversed on one end of the cable. Pin 1 connects to pin 8, pin 2 
connects to pin 7, and so on. Like the straight-through and crossover cables, a 
rollover cable uses an RJ-45 connector on each end. 


Transmit he : e 3 Transmit 


3 ——— — -3 
7 4 
Receive i E l Receive 


5 5 
6 6 
7 7 
8 Straight-Through 8 
Transmit E E ; | Transmit 
2 A 
3 3 
Receive 4 4 Receive 
5 5 
6 6 
7 7 
8 Crossover 8 
i il 
2 2 
3 3 
4 4 
r \AN y 
7 7 
8 8 
Rollover 


568A and 568B—2.4A Patch Panel—2.8D 


66 and 110 Block—2.8E 


2.4—Given a scenario, differentiate and implement appropriate wiring 
standards: 568A, 568B, straight vs. crossover, rollover, and loopback. 
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2.4C Je Loopback 


Description A loopback test checks a hardware device's ability to transmit and receive 
signals. It consists of diagnostic software and an adapter (connector) called a 
loopback. The loopback is plugged into the back of the network interface card. 
When the diagnostic software is run, the loopback completes the electrical 
circuit between the transmit and receive pins. 


Examples 

Related NIC—3.1D 

Concepts 

Network+ 2.4—Given a scenario, differentiate and implement appropriate wiring 
Objective standards: 568A, 568B, straight vs. crossover, rollover, and loopback. 
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Description 


Examples 
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WAN Technology Types 


2.5A 


The worldwide communications system is quite complex, offering a variety of 
media to use and many different long-distance providers. While a LAN usually 
has a limited scope of communications media, a MAN and a WAN have a large 
variety of communications media and technologies from which to choose. 


IAN 
Connection 
Technology 


ATM 


Access Data Rate 


Method 


Direct 25 Mbps-622 Mbps 
connection 


Comments 


Virtually private. 


Cable Internet 
Service 


Direct Downstream: 

connection | 27 Mbps-37 Mbps (theoretical). 
300 kbps-500 kbps (actual) 
Upstream: 320 kbps—10 Mbps 
100 Mbps 


FDDI Direct 


connection 


Direct 
connection 


Frame Relay Virtual 56 kbps—45 Mbps 
connection 


i 64 kbps and 128 kbps 


Fractional T1 64 kbps 


1.544 Mbps 


PRLISDN Direct 
connection 
P 


ublic Switched | Dial-up 56 kbps 
Telephone 
Network (PSTN) 


Satellite Internet | Direct 400 kbps-2 Mbps 
Service connection 


Direct 
connection 


51 Mbps-9953 Mbps 


Direct 1.544 Mbps-52 Mbps 


connection 


CompTIA Network+ Reference 


TV Cable service. Requires a 
cable modem. Cable service 
uses MPEG-2 for data 
compression. 


High reliability and 
bandwidth. 

‘T-carrier technology. Can use 
multiple channels to increase 
speed by increments of 64 kbps. 


Virtually private. 


Requires a leased line and an 
ISDN modem. Can carry only 
one frequency. 


Requires a leased line and an 
ISDN modem. Can carry only 
one frequency. 


This is also known as Plain 
Old Telephone Service (POTS). 
Requires a telephone modem. 


May use a dial-up service 

to connect to the satellite 
Internet provider. Experiences 
propagation delay. 
Commonly used to span long 
distances such as across the 
nation and overseas. 


T-carrier technology. 
T-carrier technology. 


Packet switching, analog 
technology. 


Data rate depends on the 
version of DSL. Requires 

an xDSL modem. Limited 
distance from the DSL modem 
to the telephone company’s 
Local Central Office is 
between 1,000 ft.-18,000 ft. 


185 


Related Frame Relay—2.5B T-Carrier—2.5C 


Concepts xDSL—2.5D Cable Modem—2.5E 
Satellite—2.5F OC-X—2.5G 
ATM—2.5H MPLS—2.51 
ISDN—2.5] POTS/PSIN=25K 
Packet and Circuit Switching—2.5L 

Network+ 2.5—Categorize WAN technology types and properties: Type (Frame Relay, 

Objective E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 


ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Frame Relay 2.5B 


Frame Relay is a packet switching protocol that typically uses leased lines 
such as T1 to carry data over long distances. Frame Relay allows for a data 
rate as high as 1.544 Mbps. Frame Relay data transfer speeds are limited to the 
media used. A T1 line has a bandwidth of 1.544 bps. T-3 is limited to 45 Mbps. 


Frame Relay X.25 


Analog 


56 kbps 56 kbps-1.544 kbps 
Packet switching Packet switching 
Permanent virtual circuit | Permanent virtual circuit 


WAN Technology Types—2.5A T-Carrier—2.5C 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 


Copyright by Goodheart-Willcox Co., Inc. CompTIA Network+ Reference 187 


ABE 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


T-Carrier 


T-carrier is a leased line that follows one of the standards known as T1, 


. fractional T1, T2, or T3. The T-carrier is a dedicated, permanent connection 


that is capable of providing a high bandwidth. The European counterpart to a 
T1 leased line is E1, which has a maximum rate of 2.048 Mbps. The Japanese 
counterpart is J1. 


T-Carrier Number of Number of Maximum 
Standard T1 Lines Channels Data Rate 


1.544 Mbps 
[96 [es Mbps 
274.176 Mbps 


Japan 
T1 1.544 Mbps 
ls 34.368 Mbps 32.064 Mbps 
274.176 Mbps 139.264 Mbps : 97.728 Mbps 


AO IT EIN 


WAN Technology Types—2.5A Frame Relay—2.5B 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 


188 Networking Fundamentals Study Guide 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


xDSL a ss 2251) 


Digital Subscriber Line (DSL) is a leased line dedicated to networking that 
uses multiple frequencies as separate channels on the existing telephone local 
loop. The multiple channels combine to carry more data than the original 
telephone modem design. 


DSL Description Upstream Data Downstream Maximum — 

Type Rate Data Rate Distance 
between DSL 
Modem and 
Central Office 


| ADSL | Asymmetrical DSL | 1.544 Mbps _{ 15 Mbps-8 Mbps | 12,000 ft—18,000 ft. 
Le Symmetric DSL 1.544 Mbps 1.544 Mbps 10,000 ft. 
| HDSL | High bit-rate DSL | 1.544 Mbps 14,000 ft. 


Very high bit-rate | 1.5 Mbps-2.3 Mbps | 13 s [13 Mbps-52 Mbps | 1000 ft.—4500 ft. 
DSL 


WAN Technology Types—2.5A POTS/PSTN—2.5K 
Modem—3.1C 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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ZDE 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Cable Modem 


A Cable modem uses the Cable television distribution system to provide 
Internet access. Cable Internet service is an asymmetrical form of 
communication. The term asymmetrical is used to describe Cable Internet 
service communication because the uplink and downlink have two different 
transfer speeds. Upstream connections vary between 320 kbps and 10 Mbps, 
while downstream data rates vary between 27 Mbps and 36 Mbps. 


Cable TV 
converter 


Twisted pair or 


USB cable 
- m 
27 Mbps - 36 Mbps Cable modem 
downstream ) 


Pad 


From service 3 À 
provider Splitter 32.0 kbps — 10 Mbps upstream 


WAN Technology Types—2.5A Modem—3.1C 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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Satellite 2.5F 


Description A satellite system can be used for Internet access and for data communication. 
A typical satellite system consists of a satellite dish at the satellite service 
provider location, a satellite, and a satellite dish at the consumer location. 
Typical download speeds for consumer satellite communications are 400 kbps 
to 500 kbps. Upload speeds are limited to the particular land-based technology 
used for upload. 


Examples Satellite at 22,300 mi. (35,880 km) 
, stationary orbit 
Uplink and Satellite 
ali Downlink 
Consumer 
Internet service location 
provider location R 
Coaxial 
cable 
Satellite dish Workstation, 
server, or router 
Related WAN Technology Types—2.5A 
Concepts 
Network+ 2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
O bj ective E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 


ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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de OC-X 


Description Synchronous Optical Network (SONET) is similar to T-carrier in that special 
termination equipment, such as a multiplexer, is needed at the customer 
location; however, SONET bases its technology on fiber-optic cable. SONET 
often uses multiplexer technology to carry a mix of data, voice, and video on 
the same channel and is designed as a ring topology similar to the dual-ring 
structure of FDDI. SONET levels are identified by OC and the number of 
the level, such as OC-1 for SONET level 1. SONET is the standard choice for 
connecting global-sized networks spanning across the nation and oceans. 


Examples SONET Level Maximum Data Rate 
622 Mbps 
1244 Mbps 
2488 Mbps 
9953 Mbps 
o Fiber-Optic Cable—2.1C Single-Mode and Multimode—2.1D 
TE a WAN Technology Types—2.5A 
Network+ 2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
Objective E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 


ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


ATM | 2.5H 


Asynchronous Transfer Mode (ATM) is a widely used protocol that is 
especially designed for carrying audio, video, and multimedia. It can support 
a bandwidth of 622 Mbps. ATM is designed to divide text and audio/video 
into cells of 53 bytes each. Cells are placed in sequence giving higher priority 
to the audio/video cells. 


e : The sound of 
: a) — a voice is 
E D converted to an 
PO] + analog signal 


ADC Analog signal 


converted to a 


digital signal 
Network system 
Digital signal is 


converted to an 


A analog signal 
: Analog signal is 


Voice data travels 
as a digital signal 
across a WAN 


4 


converted to the 
sound of a voice 


WAN Technology Types—2.5A 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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2.51 MPLS 


Description Multi-Protocol Label Switching (MPLS) is a routing protocol that allows a 
label to be attached to an IP packet in order to route the packet to a specific 
destination. MPLS is not intended by design for routing on a local area 
network but rather for moving packets from point to point across large 
network systems controlled by a single authority. 


Examples elgg Soares Label Edge Router 


Packet without 
MPLS tag 


Packet with MPLS tag 


Manny Enterprise 


Manny Enterprise 
ace? Label Edge/Router Ens 
Manny Enterprise 
San Francisco 

Related WAN Technology Types—2.5A 

Concepts 

Network+ 2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
Objective E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 


ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


ISDN | | 2.5] 


Integrated Services Digital Network (ISDN) is a long-distance technology 
that provides a means for a fully digital transmission over channels that are 
capable of speeds of up to 64 kbps. 


Two B channels at 64 kbps each 


64 kbps 


+64 kbps 
128 kbps Maximum data rate 


One D channel at 16 kbps 
Basic Rate ISDN (BRI-ISDN) Cable 


ISDN Type 
BRI-ISDN 


Maximum Speed Comment 
128 kbps 


Contains two B (bearer) 
channels and one D (delta) 
channel 


PRI-ISDN 1.544 Mbps Contains twenty-three B 
(bearer) channels and one 


D (delta) channel 


Can carry multiple 
frequencies, such as voice, 
data, and video 


WAN Technology Types—2.5A Modem—3.1C 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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ZS5K 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


POTS/PSTN 


Public Switched Telephone Network (PSTN), or Plain Old Telephone Service 
(POTS), is the older telephone system that uses twisted pair cabling and 
analog signals rather than digital. Typically, the PSTN is used when making a 
dial-up connection. A dial-up connection is a type of connection made using a 
traditional telephone line to reach a distant computer or network system. 


Local Central Office 


Dial-up connection 


T1 line 


Internet Service 


Provider (ISP) 
Twisted Pair Cable—2.1A STP vs. UTP—2.1B 
WAN Technology Types—2.5A Modem—3.1C 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Packet and Circuit Switching 201 


Two main categories describing the way data are routed between two points 
are packet switching and circuit switching. Circuit switching establishes a 
permanent connection between two points for the duration of the data transfer 
period. Packet switching breaks the data transmission into smaller parts called 
packets. Each packet has a source and destination address and a sequence 
number attached to it. The packets are sent out onto the Internet and may each 
take a different route to their destination. 


Circuit Switching 


Permanent connection ISP or remote 
system 


Internet 
' route 


Internet 
FDDI Router o 
Frame Relay 
Ethernet 
Packet 1 ====-»- 
Packet 2 ——S 
WAN Technology Types—2.5A T-Carrier—2.5C 
ATM—2.5H ISDN—2.5J 


POTS PSTN=ZZ5K 


2.5—Categorize WAN technology types and properties: Type (Frame Relay, 
E1/T1, ADSL, SDSL, VDSL, Cable modem, satellite, E3/T3, OC-x, wireless, 
ATM, SONET, MPLS, BRI-ISDN, PRI-ISDN, POTS, PSTN), and properties 
(circuit switch, packet switch, speed, transmission media, distance). 
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2.6A 802.3 Copper Cable Classifications 


Description The IEEE 802.3 standard comprises various Ethernet classifications. These 
classifications differ by data rate, topology, and media type and are named 
with short descriptions, such as 1000BaseT and 10GBaseT. 


Examples | i | Maximum Minimum 
Category Classification Data Rate Segment Segment Cable Type Topology 
Length Length 


10Base2 10 Mbps 0.5m RG-58 Bus 
(thinnet) 
10Base5 | 10 Mbps 2.5m RG-8 Bus | 
(thicknet) 
10BaseT 0.6 m Category | Star 
3,4, and 5 
Fast 100BaseT4 100 Mbps | 100 m 0.6 m Category | Star 
Ethernet i 3, 4, and 5 
JETTA 
100BaseTX 100 Mbps 0.6 m Category 5 | Star 
Gigabit | 1000BaseCX 25m 0.6 m Category 5 | Star 
Ethernet 
1000BaseT 100 m 0.6 m Category 
ne 
10 10GBaseT 55m 0.6 m Category 6 ¢ 
Gigabit | 10GBaseT 100 m 0.6m Category | Star 
Ethernet ba 


Note: 1000BaseCX is obsolete and is no longer recognized. 


Related Twisted Pair Cable—2.1A STP vs. UTP—2.1B 
Concepts Coaxial Cable—2.1E Coaxial Cable Types—2.1F 
Network Connector Types—2.2A Network Topologies—2.3A 
CSMA/CD—2.6C Collision Domain—2.6D 
Bonding—2.6E Hub—3.1A 
Switch—3.1F Data Link Layer—4.1G 
Physical Layer—4.1H 
Network+ 2.6—Categorize LAN technology types and properties: Types (Ethernet, 
Objective 10BaseT, 100BaseTX, 100BaseFX, 1000BaseT, 1000BaseX, 10GBaseSR, 


10GBaseLR, 10GBaseER, 10GBaseSW, 10GBaseLW, 10GBaseEW, 10GBaseT) 
and properties (CSMA/CD, broadcast, collision, bonding, speed, distance). 
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802.3 Fiber-Optic Classifications 2.6B 


Description In 2002, the IEEE amended the 802.3 Ethernet standard to include 10 Gigabit 
Ethernet. The amended standard is known as IEEE 802.3ae. The IEEE 802.3ae 
standard only recognizes fiber-optic cables. It does not recognize copper core cables. 


Examples Single Coro Wavelongth 
Sa mode (S)or Diameter in Cable 
Multimode in Nanometers Distance 
(M) Microns (nm) 


10BaseFL |M a 2000m | Early generic 
fiber-optic standard. 


100BaseFX |M ‘ 2000 m Known as Fast 
Ethernet. 
1000BaseSX | M 300 m Known as Gigabit 
Ethernet. 
1000BaseLX | M : 550 m Known as Gigabit 
Ethernet. 
1000BaseLX | S 5 km Known as Gigabit 
Ethernet. 


10GBaseSR | M Known as 10 Gigabit 

Ethernet. Distance 

dependent on 
bandwidth. 


Known as 10 Gigabit 
Ethernet. 


10GBaseER |S Known as 10 Gigabit 
Ethernet. 

10GBaseSW | M Commonly used inside 
commercial buildings. 

10GBaseLW |S Has a long wave-length 
and is used relatively 
long distances. 

10GBaseW |S Used for “long-haul” 
connections. 


Note: Companies may calculate greater distances based on manufacturer cable 
specifications and equipment requirements. Such engineering is common in long-haul 
communication systems such as long-distance telecommunications industries. 


Remarks 


Related Fiber-Optic Cable—2.1C Single-Mode and Multimode—2.1D 
Concepts Network Connector Types—2.2A Network Topologies—2.3A 
CSMA/CD—2.6C Data Link Layer—4.1G 


Physical Layer—4.1H 


Network+ 2.6—Categorize LAN technology types and properties: Types (Ethernet, 10BaseT, 

A A 100BaseTX, 100BaseFX, 1000BaseT, 1000BaseX, 10GBaseSR, 10GBaseLR, 10GBaseER, 
opjestive 10GBaseSW, 10GBaseLW, 10GBaseEW, 10GBaseT) and properties (CSMA/CD, 
broadcast, collision, bonding, speed, distance). 


Copyright by Goodheart-Willcox Co., Inc. CompTIA Network+ Reference 199 


2.6C 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


CSMA/CD 


Ethernet networks use the CSMA/CD access method to control and ensure the 
delivery of data. CSMA/CD is a broadcast method of communication. When 

a computer sends data to another computer, it does so by broadcasting the 
information to all the computers on the network. This is similar to one person 
yelling in a room full of people “Bob, do you hear me?” Everyone in the room 
hears Bob’s name being called, but only Bob will reply if he is in the room. 


All computers 
on the network 
receive Bob’s 
message 


o nw 
.” >. 


Station 1 
Bob's computer Message 
to Sue 


` 

1 Only Sue's computer 
accepts Bob's message 
1 


Station 3 ` Station 4 eS 
`s, Sue's computer.” 


~ > 
~ - 
"am 


MAC Address—1.3A l Collision Domain—2.6D 
Data Link Layer—4.1G 


2.6—Categorize LAN technology types and properties: Types (Ethernet, 
10BaseT, 100BaseTX, 100BaseFX, 1000BaseT, 1000BaseX, 10GBaseSR, 
10GBaseLR, 10GBaseER, 10GBaseSW, 10GBaseLW, 10GBaseEW, 10GBaseT) 
and properties (CSMA/CD, broadcast, collision, bonding, speed, distance). 
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Collision Domain 2.6D 


Description The section of a network where collisions occur is referred to as a collision domain. 
A collision domain consists of computers that can directly communicate with each 
other using broadcasts. The collision domain can be isolated by equipment that 
controls or limits the broadcasts. Equipment such as switches and routers controls 
broadcasts by limiting the extent or physical boundary of a collision domain. 


Examples 


Collision 


domain SN 


Switch 


Engineering 


eee 


Collision 
domain 


Switch 
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Related 


C t CSMA/CD—2.6C Switch—3.1F 
ld hh Router—3.11 

Network+ 2.6—Categorize LAN technology types and properties: Types (Ethernet, 
Objective 10BaseT, 100BaseTX, 100BaseFX, 1000BaseT, 1000BaseX, 10GBaseSR, 


10GBaseLR, 10GBaseER, 10GBaseSW, 10GBaseLW, 10GBaseEW, 10GBaseT) 
and properties (CSMA/CD, broadcast, collision, bonding, speed, distance). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Bonding eee et ZE 


STP and coaxial cable requires equipment to be bonded and grounded before 
the shielding can be effective. The ground path must be continuous from the 
equipment to which the cable is attached to the central ground in the electrical 
system. If the ground path is not continuous, the shielding will not effectively 
protect the network cables from electrical and radio interference. 


Wiring closet 


Equipment rooms and main 
cross connect 


Equipment 
panel 


Main electrical system ground 
located at the entrance facility 


Grounding conductor 


Grounding electrode 


Twisted Pair Cable—2.1A STP vs. UTP—2.1B 
Coaxial Cable—2.1E Coaxial Cable Types—2.1F 


2.6—Categorize LAN technology types and properties: Types (Ethernet, 
10BaseT, 100BaseTX, 100BaseFX, 1000BaseT, 1000BaseX, 10GBaseSR, 
10GBaseLR, 10GBaseER, 10GBaseSW, 10GBaseLW, 10GBaseEW, 10GBaseT) 
and properties (CSMA/CD, broadcast, collision, bonding, speed, distance). 


Copyright by Goodheart-Willcox Co., Inc. CompTIA Network+ Reference 203 


2.74 Peer-to-Peer 


Description All computers are considered peers or equals in a peer-to-peer network. A 
computer in a peer-to-peer network can serve as both a client and a server. 
Each computer is considered equal because each computer’s user has equal 
authority to share his or her computer's resources with other users on the 
network. Peer-to-peer networks are often referred to as workgroups. 


Examples 
| Client/server Client/server 
Peer-to-Peer Network 
do t Client/Server —2.7B 
oncepts 
Network+ 2.7—Explain common logical network topologies and their characteristics: 
Ob j ective Peer-to-peer, client/server, VPN, and VLAN. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Client/Server 2 


The client/server network consists of computers connected via a network 
to one or more servers. As its name implies, the server provides services 
to networked computers, or clients. Typical services are security, database 
applications, data storage, Internet access, Web page hosting, and e-mail. 


Client/Server Network 


Peer-to-Peer—2.7A 


2.7—Explain common logical network topologies and their characteristics: 
Peer-to-peer, client/server, VPN, and VLAN. 
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27C 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


VPN 


A Virtual Private Network (VPN) is a simulated, independent network created 
by software over a public network. A VPN is created through a software 
package that provides security. Adding special equipment, such as a firewall, 
can further increase the security of the VPN. All operating systems support 

a form of VPN. Four of the most common protocols used in a VPN are PPTP, 
L2F, L2TP, and IPSec. These protocols allow a VPN to provide four basic 
features common to all VPN connections: authentication, access control, 
confidentiality, and data integrity. 


PPTP, L2F, L2TP 
and IPSec 


Firewall—3.1J L2TP—6.3C 
PPTP—6.3D IPSec—6.3E 


2.7—Explain common logical network topologies and their characteristics: 
Peer-to-peer, client/server, VPN, and VLAN. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


VLAN ZO 


A Virtual Local Area Network (VLAN) is a broadcast domain created by one 
or more switches based on logical (MAC) addresses. VLANs are typically used 
to improve network performance by reducing the size of collision domains. 
VLANs can also be used to create secure subnets on shared network media. 


Sm + 


Pe "y 
a. 
A 


Broadcast domain 


Broadcast domain 


MAC Address—1.3A Subnetting—1.4A 
Collision Domain—2.6D Switch—3.1F 
Trunking—3.3C 


2.7— Explain common logical network topologies and their characteristics: 
Peer-to-peer, client/server, VPN, and VLAN. 
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2.8A 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Horizontal Cross Connect 


A horizontal cross connect provides a mechanical means of connecting 
horizontal cabling systems to other cables or equipment. All work areas 
connect to the telecommunications closet horizontal cross connects. 

A horizontal cross connect is used to connect horizontal cabling to a 
backbone or to system equipment such as a router, switch, bridge, or server. 


Main 
cross connect 


Horizontal 


cross connect Patch cable 


Patch cable 


Telecommunications Work area 
closet 


Horizontal Wiring—2.8B Backbone—2.8C 
Wiring Termination—2.8K Switch—3.1F 
Bridge—3.1G Router—3.11 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Horizontal Wiring 2.8B 


Horizontal wiring refers to the section of cable that runs from individual work 
areas to the telecommunications closet. Horizontal cable distance is limited 

to 90 meters for the horizontal run from the telecommunications outlet to the 
telecommunications closet. The maximum total distance is 100 meters. 


Horizontal wiring MUTOA 


Patch cables 
C 


Patch cables 
A 


Telecommunications 
room 


All distances are in meters 


Horizontal Cross Connect—2.8A Patch Panel—2.8D 
66 and 110 Block—2.8E 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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2.8C | Backbone 


Description A network backbone is located between the telecommunications closets, 
equipment rooms, and main entrance facility. The backbone connects these 
areas and does not serve individual workstations. A backbone can run 
horizontally and vertically through a building. The most widely accepted 
material used for network backbones is fiber-optic cable. 


Examples Cable Type _ | Distance 

UTP Category 3 or higher (Category 5, 5e, | 800 meters (voice) 

6, or 6e recommended) 90 meters (data) 

STP Category 3 or higher (Category 5, 5e, | 800 meters (voice) 

6, or 6e recommended) 90 meters (data) 

Multimode or 62.5/125 fiber-optic cable 2000 meters 

Single-mode fiber-optic cable 3000 meters 
Related Fiber-Optic Cable—2.1C Single-Mode and Multimode—2.1D 
Concepts Horizontal Cross Connect—2.8A Horizontal Wiring—2.8B 
Network+ 2.8—Install components of wiring distribution: Vertical and horizontal cross 
Objective connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, A 


demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Patch Panel 


2.8D 


A typical patch panel is a rack-mounted wiring device for network systems. 
The device has RJ-45 jacks on the front and a matching series of connections 
on the back. Patch panel cables are used for making connections between the 
front of the patch panel and equipment. The back of the panel is where the 


horizontal run cable is terminated. 


J Lemp AN). 


Front 


Twisted Pair Cable—2.1A 
66 and 110 Block—2.8E 


Wiring Termination—2.8K 


K TT pe ; 


eve ee 


nn —<— 


Back 


Network Connector Types—2.2A 
MDF—2.8F 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 


wiring termination. 
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2.8E 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


66 and 110 Block 


There are two main types of punch down blocks: 66 and 110. The 66 block is 
older than the 110 block. The 110 block was designed to support higher cable 
frequencies and is less prone to crosstalk. It is the preferred style for network 
cable such as Cat 5, Cat 5e, and Cat 6. The 66 block was originally designed for 
telephone communications and is limited to Cat 3 or earlier types of twisted 
pair cable. It does not support high frequencies. 


Punch 
down tool 


110 Block 


Punch down tool pushes 
conductor into the IDC 


y 


Conductor with 


i j Insulation-displa t 
blue insulation sulation-displacemen 


connector (IDC) 


Insulation-displacement 
connector (IDC) pierces 
the conductor’s insulation 


Twisted Pair Cable—2.1A Patch Panel—2.8D 


Wiring Termination—2.8K 


2.8—Install components of wiring distribution: Vertical and horizontal cross connects, 
patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, demarc, demarc 
extension, smart jack, verify wiring installation, and verify wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


MDF w = s:, 


The Main Distribution Frame (MDF) is the cable connection point where the 
private telecommunications cables come into a building and then connect or 
distribute to other areas in the building. The MDF typically consists of a cable 
rack and physical cable connections for the individual cable conductors. The 
MDF is usually located in the main entrance room. 


Entrance facility or 
Internet main entrance room 


eie Distributión 

Frame (MDF) 
Network Interface 

Demarc|£P Device (NID) 

or Optical Network 


Terminal (ONT) 


Internet 
Service 
Provider 
(ISP) 


IDF—2.8G 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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2.8G 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


IDF 


An Intermediate Distribution Frame (IDF) acts as the connection point 

from the Main Distribution Frame (MDF) and distributes cable runs to all 
areas on a specific floor. For example, when a multistory building requires 
telecommunications, each floor would have an IDF that connects to the MDF 
in the main entrance facility or main entrance room. 


Main Distribution 
Frame (MOF) 


Intermediate Distribution 
Frame (IDF) Patch cable 


UO 


Patch cable 


aa 
Telecommunications Work area 
closet 


MDF—2.8F 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Demarcation Point 2.8H 


Demarcation point, or demarc, is the spot where the customer equipment or 
cable meets the telecommunications provider cable or equipment. Both the 
smart jack and the Optical Network Terminal (ONT) can be identified as the 
demarcation point. 


Equipment room, telecommunications room, 
Entrance facility or or telecommunications closet 
main entrance room 


Internet 


E RADIUS 
Í Print 

p E-mail 
Data Patch panel 
» Web 


Frame (MDF) 


Network Interface 
GQ Device (NID) 

or Optical Network 
Terminal (ONT) 


Horizontal wiring 


Demarcation 
point 


Internet 
Service 
Provider 
(ISP) Work area Work area 


Smart Jack—2.8I 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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E Make Jack 


Description A smart jack is considered an intelligent connection point because it l 
incorporates additional electronics that allow it to perform specific functions. 
For example, a smart jack can perform a loopback test remotely from the 
service provider without the need to send a technician to the smart jack 
location. Smart jacks are commonly used for T1 and DSL terminations. 


Examples 

Related Demarcation Point—2.8H 

Concepts 

Network+ 2.8—Install components of wiring distribution: Vertical and horizontal cross 
Obj ective connects, patch panels, 66 block, MDEs, IDFs, 25 pair, 100 pair, 110 block, 


demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Wiring Installation 2.8) 


There are many organizations that write standards for communications and 
network systems. The standards of these organizations are often incorporated 
into the contract specifications for network installation. 


Standard Description 


TIA/EIA 569-A 


TIA /EIA 568-B.1-2000 | Commercial Building Telecommunications Cabling Standard 
TIA /EIA 606-A 


Commercial Building Standard for Telecommunications 
Pathways and Spaces 


Administration Standard for Commercial Telecommunications 
Infrastructure 


TIA/EIA 607-A 


Commercial Building Grounding and Bonding Requirements 
for Telecommunications 


Additional Horizontal Cabling Practices for Open Offices 


Twisted Pair Cable—2.1A STP vs. UTP—2.1B 
Plenum-Rated Cables—2.1G 568A and 568B—2.4A 
Bonding—2.6E Horizontal Cross Connect—2.8A 
Horizontal Wiring—2.8B Backbone—2.8C 

Patch Panel—2.8D 66 and 110 Block—2.8E 
MDF—2.8F IDF—2.8G 

Demarcation Point—2.8H Smart Jack—2.81 


2.8—Install components of wiring distribution: Vertical and horizontal cross 
connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 
demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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2.8K Wiring Termination 


Description The back of the patch panel is where the horizontal run cable is terminated. The 
individual wires of twisted pair cable are pushed into the connections on the 
back of the patch panel using a punch down tool. The connections found on the 
back of patch panels are also found in RJ-45 outlets and punch down blocks. 


Examples » 
=o RJ-45 outlet _ 
Punch down tool 
de Twisted Pair Cable—2.1A 568A and 568B—2.4A 
oncepis Patch Panel—2.8D 66 and 110 Block—2.8E 
Network+ 2.8—Install components of wiring distribution: Vertical and horizontal cross 
Obj ective connects, patch panels, 66 block, MDFs, IDFs, 25 pair, 100 pair, 110 block, 


demarc, demarc extension, smart jack, verify wiring installation, and verify 
wiring termination. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Hub © | © 31A 


A hub is a central connection point where all network cables are concentrated. 


It is classified as either active or passive. A passive hub simply acts as a central 
connection point for network cables. Packets transmitted from one node are passed 
to all nodes connected to the passive hub and through the hub to other sections of 
the network. An active hub, sometimes called an intelligent hub or switch, is designed 
with a power supply. The active hub not only acts as a central connection point for 
the network cabling, it also regenerates digital signals like a repeater. The active hub 
can also determine whether a packet should remain in the isolated section of the 
network or pass the packet through the hub to another section of the network. 


Passive 


Station 3 


——> Direction of packet flow Station 5 


(RR 


‘Station4 


—>_ Direction of packet flow 


Station 2 


Twisted Pair Cable—21A Network Connector Types—2.2A 

Network Topologies—2.3A Straight-Through, Crossover, and Rollover—2.4B 
Repeater—3.1B Switch—3.1F 

OSI Model—4.1A Physical Layer—4.1H 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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3.1B 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Repeater 


The repeater amplifies or reshapes the weak signal into its original strength 
and form. A repeater allows the network media to exceed its recommended 


maximum length. 


aa) 


Original digital signal 


Repeater 


Weak signal enters The signal is regenerated 


the repeater to its original strength 
and form 


802.3 Copper Cable Classifications—2.6A OSI Model—4.1A 
Physical Layer—4.1H 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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r 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Modem > | SL 


A modem is a device that allows a computer to connect to the Internet by 
converting digital signals from the computer to signals compatible with 
the infrastructure used to reach an Internet Service Provider. Examples of 
modems are dial-up, Cable, DSL, and ISDN. 


ÓN 56 kbps 


ial-up modem 


Dial-up 


Cable TV 


Twisted pair or 
converter 


USB cable 


Cable modem 


li a ls 
REE Coaxial cable 
Cable 
Phone jack/ Twisted pair (Ethernet with RJ-45 


DSL connection connector) or USB cable 


Twisted pair (DSL with pa 
RJ-11 connector) 


ISDN modem 
ISDN 


WAN Technology Types—2.5A xDSL—2.5D 
Cable Modem—2.5E ISDN—2.5] 
POS Pol — 25k 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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SD | 2. + NIC 


Description A network interface card (NIC) contains the electronic components needed to 
send and receive a digital signal. A network card is known by many other names 
such as a network host adapter, network expansion card, and network adapter card. 


Examples 
(Courtesy of Cisco System, Inc.) 
ee MAC Address—1.3A Network Connector Types—2.2A b 
oncepts OSI Model—4.1A Data Link Layer—4.1G 
Network+ 3.1—Install, configure, and differentiate between common network devices: 
Obj ective Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 


access point, basic router, basic firewall, and basic DHCP server. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Media Converter 3.1E 


A media converter changes one type of electrical signal into another or 
interfaces one cable type to another. 


(Courtesy of TRENDnet) 


Twisted Pair Cable—2.1A Fiber-Optic Cable—2.1C 
Coaxial Cable—2.1E 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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Ella 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Switch 


A switch filters network traffic or creates subnetworks from a larger network. 
Some LANs can easily have hundreds or even thousands of nodes. A switch 
can be used to divide the transmission paths to improve data delivery. When 
switches form logical networks from a large network, they are called virtual 
networks or virtual LANs. 


A PC connected 
as part of virtual 
network A 


A PC connected 
as part of virtual 
network B 


VLAN—2.7D Hub—3.1A 
OSI Model—4.1A Data Link Layer—4.1G 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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Bridge = 3.1G 


Description A bridge can be used to divide the network into smaller segments, reducing 
the chance of collisions. A bridge controls the flow of network traffic between 
two segments by reading the destination of a network packet. The bridge 
either allows a packet to pass through to the other segment or restricts the 
packet to the originating segment. 


Bridge Ñ 
Business Management Segment Engineering Segment 
‘ieee OSI Model—4.1A Data Link Layer—4.1G 
oncepts 
Network+ 3.1— Install, configure, and differentiate between common network devices: 
Obj ective Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 


access point, basic router, basic firewall, and basic DHCP server. 
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3.1H 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Wireless Access Point 


A Wireless Access Point (WAP) is a device that provides a connection between 
a wireless network and a cable-based network and controls the flow of all 
packets on the wireless network. 


Omni antenna ee Omni 
i = mni antenna 
(transmit) — y pe (receive) 


Point (WAP) 
802.11 a/b/g/n—1.7A 802.11x and RADIUS—1.7C 
Wireless Channels—1.7E Wireless Access Point Placement—3.4A 
Wireless Access Point OSI Model—4.1A 


Configuration—3.4B 
Data Link Layer—4.1G 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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m 


Router | ~ 3.11 


Description A router navigates packets across large networks, such as the Internet, using 
the most efficient route. It maintains a table of information containing the 
location of other routers and their identification. Routers are typically installed 
between LANs, but may be installed inside a LAN if traffic conditions warrant 
their installation. Routers “route” data packets across WANs using the TCP/IP 
protocol addressing scheme. 


Examples 


br IC 


A] TRIS 


ing onni 
; Pennsylvania 
Nebraska 
Nevada E > | 
Colorado E Ea 
R, - 


ee N 


Router e—a Packet 


in route 


Routing information table Routing information table 


Network Layer 
Navigation through IP addresses 


Router Router 
128.50.0.1 E E — a 
134.96.0.1 


128.50.0.2 B 
= 
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Related IPv4 Address—1.3B IPv6 Address—1.3C 


Concepts Common IPv4 and IPv6 Routing Protocols—1.5A IGP vs. EGP—1.6A $ 

Static vs. Dynamic—1.6B Next Hop—1.6C 

Routing Tables—1.6D Convergence—1.6E 

OSI Model—4.1A Network Layer—4.1F 
Network+ 3.1—Install, configure, and differentiate between common network devices: 
Objective Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 


access point, basic router, basic firewall, and basic DHCP server. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Firewall - SL] 


A firewall is designed to monitor and pass or block packets as they enter or 
leave a network system. A firewall may consist of either hardware or software 
or a combination of both. Servers, routers, and individual computers may be 
used as firewalls. 


Authorized and ; Local network PCs 
unauthorized PCs Packets from author ized PCs and file servers 
> are passed by the firewall 
ci ans T 


=e 
Authorized 


TEE. 


FE, Packets from unauthorized 
Unauthorized PCs are blocked by 
the firewall 


> 5d 


Intrusion Detection and Intrusion Prevention Systems—6.1A 


Common Firewall Features—6.2A 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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3.1K 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


DHCP Server 


A DHCP server automatically assigns IP addresses to computers on the . 
network. The act of automatically assigning IP addresses is known as dynamic 
addressing. The DHCP server has a pool, or list, of IP addresses to draw from. 
Each computer that logs on to the network is assigned an address from the 
pool. The IP address assignment is temporary. The address is released after a 
period of time and may be reissued to another computer. 


Station! 
195.102.100.002 


Static IP address 
Serverl i 


195.102.100.001 


195.102.100.002 
195.102.100.003 
195.102.100.004 


195.102.100.005 Pool of IP addresses 
195.102.100.006 issued dynamically 


195.102.100.007 | iy the DHCP server 
DHCP Server 195.102.100.008 
195.102.100.009 


195.102.100.010 
195.102.100.011 


Station2 
195.102.100.003 


Station3 
195.102.100.004 


” 


Station5 
195.102.100.006 


Station4 
195.102.100.005 


Each workstation receives a temporary IP address from the DHCP server 


IPv4 Address—1.3B DHCP—1.4F 


3.1—Install, configure, and differentiate between common network devices: 
Hub, repeater, modem, NIC, media converters, basic switch, bridge, wireless 
access point, basic router, basic firewall, and basic DHCP server. 
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Description 


Multilayer Switch 


3.2A 


A multilayer switch has an additional electronic chip known as an Application 


Specific Integrated Circuit (ASIC). The addition of the ASIC gives the layer 2 switch 
additional capabilities typically found at upper levels of the OSI model. Multilayer 
switches are generally limited to a specific task and have limited programmable 
functions. They are referred to by many different names such as layer 3 switch, 

4-7 switch, layer 7 switch, URL switch, Web content switch, and content switch. 


Examples 


Related 
Concepts 


Session 


OSI Model Layer 


Application Layer 4-7 switch (content switch) 


Layer 4-7 switch (content switch) 


Switch Type 


Presentation 


Layer 4-7 switch (content switch) 


Transport 


Layer 4-7 switch (content switch) 


Network 


Layer 3 switch 


Data Link 


Layer 2 switch 


Physical 


NA 


Switch—3.1F 

OSI Model—4.1A 
Presentation Layer—4.1C 
Transport Layer—4.1E 
Data Link Layer—4.1G 


Multifunction Network Devices—3.2D 
Application Layer—4.1B 

Session Layer—4.1D 

Network Layer—4.1F 


Network+ 
Objective 
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3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 


CompTIA Network+ Reference 231 


3.2B 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


IDS/IPS 


An Intrusion Detection System (IDS) is a passive system; it only detects 
unauthorized activity. An Intrusion Prevention System (IPS) is a reactive 
system; it not only detects unauthorized activity, but also performs some 
function to stop the activity. 


Internet 


Intrusion Detection System 


Internet Client 


Intrusion Prevention System 


Intrusion Detection and Intrusion Prevention Systems—6.1A 


Common Firewall Features—6.2A Antivirus Software—6.6H 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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Load Balancer 3.2C 


Description Load balancing is balancing the demand of network clients to utilize system 
resources, such as files or CPU processing. For example, additional servers can 
be installed to share the processing load. When additional servers are configured 
for load balancing, they are often referred to as server clusters or server farms. 


Examples 
Server farm or server cluster 
a Network Performance Optimization—4.5A 
oncepts 
Network+ 3.2—Identify the functions of specialized network devices: Multilayer switch, 
Ob j ective content switch, IDS/IPS, load balancer, multifunction network devices, DNS 


server, bandwidth shaper, proxy server, and CSU/DSU. 
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3.2D 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Multifunction Network Devices 


Often, network devices are identified as performing other functions in 
addition to their intended purpose. For example, a network gateway can also 
perform functions associated with a firewall by filtering packets based on 

IP address, port number, or MAC address. 


Multifunction Description 
Device 


Media 
converter 


Changes one type of electrical signal into another or interfaces one cable 
type to another. Some media converters may even act as a repeater. 


An enhanced switch designed to perform more than basic switch 
functions, such as making decisions about routing a packet based 
on packet content. 


Multilayer 
switch 


Brouter Combines router and bridge functions. It functions as a bridge by 
restricting or passing packets to other sections of a LAN based on 
the MAC address. It functions as a router by forwarding packets 


based on the IP address. 

Normally a layer 1 device, it may be reclassified as a layer 2 device 
when it acts as an intelligent hub. Intelligent hubs make decisions 
based on MAC addresses and behave more like a switch. 


Router 


Can be programmed to perform a much wider amount of functions 
than a switch. For example, routers can be programmed to filter 
network traffic and can be used to create more networks. Routers 
can be used to create logical networks and subnets, limit broadcast 
domains, and create new broadcast domains. 


Port Numbers—1.2A MAC Address—1.3A 
IPv4 Address—1.3B IPv6 Address—1.3C 
Multilayer Switch—3.2A Common Firewall Features—6.2A 


Media Access Control Filter—6.3A 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


DNS Server © 3.2E 


A DNS server resolves host names to IP addresses, making it easy to identify 
and find hosts and networks. DNS root servers are located at the top of the 
domain name hierarchy structure. The root domain server stores the ultimate 
database for resolving an Internet domain name to a specific IP address. A 
top-level domain server stores DNS information of all top-level domains. A 
second-level domain server stores DNS information of all second-level domains. 


Root server Top-level Secondary-level Subdomain Resolver 
domain server domain server server 
Networking Protocols—1.1A Port Numbers—1.2A 


IPv4 Address—1.3B 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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3.2F 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Bandwidth Shaper 


A bandwidth shaper, or traffic shaper, is used to prioritize network packets 

to ensure quality of service for time-sensitive applications such as VoIP. A 
bandwidth shaper prioritizes network traffic by protocol or assigned switch 
port or port number. Bandwidth shaping can be accomplished with hardware 
or software and is used to control the bandwidth through a particular device 
such as a gateway, shared Internet connection, network switch, or router. 


Server with bandwidth- 
shaping software 


Port Numbers—1.2A  Switch—3.1F 
Router—3.11 Network Performance Optimization—4.5A 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Proxy Server 3.2G 


A proxy server is a firewall component that is typically installed on a server 
and resides between the Internet server and the LAN hosts. It appears as a 
destination host while hiding the address of the true host inside the LAN. The 
proxy server can be configured to allow packets to flow into and out of the 
network if they meet certain conditions. The conditions configured can be items 
such as specific IP addresses, certain protocols, and server names or URLs. 
Proxy servers may also cache information, like frequently visited Web sites. 


Cache 


Recently 
accessed 
Web sites 

and their IP 


Authorized and addresses 


unauthorized PCs 


Local network PCs 


Packets allowed to flow in and out 
if they meet certain conditions 


F ji ~ 


Authorized 


Proxy server 
(NAT enabled) 


¢ 
Proxy server appears as the 


destination host while hiding 
the address of the true host 


ss 
Unauthorized 


NAT—1.4D Firewall—3.]J 
Network Performance Optimization—4.5A Common Firewall Features—6.2A 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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82H 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


E¿SU/DSU 


A Channel Service Unit/Data Service Unit (CSU/DSU) converts signals from a 
LAN to signals that can be carried by a T1 line, and vice versa. 


ROUTER 
CSU/DSU 


T-Carrier—2.5C 


3.2—Identify the functions of specialized network devices: Multilayer switch, 
content switch, IDS/IPS, load balancer, multifunction network devices, DNS 
server, bandwidth shaper, proxy server, and CSU/DSU. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


PoE 3.3A 


Power over Ethernet (PoE) is an IEEE standard that specifies the supply 
of small amounts of electrical power to network devices such as cameras, 
IP phones, Wireless Access Points, speakers, and phone chargers. 


Switch—3.1F Wireless Access Point—3.1H 


3.3—Explain the advanced features of a switch: PoE, spanning tree, VLAN, 
trunking, port mirroring, and port authentication. 
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3.3B Spanning Tree Protocol 


Description Spanning Tree Protocol (STP) is a layer 2 protocol designed to manage 
networks based on MAC addresses and to prevent bridge loops. 


Examples 
Router exchanges 
information between 
the switches using the 
Spanning Tree Protocol 
(STP) 

ee MAC Address—1.3A Switch—3.1F 

oncepts OSI Model—4.1A Data Link Layer—4.1G 
Network+ 3.3—Explain the advanced features of a switch: PoE, spanning tree, VLAN 
Objective trunking, port mirroring, and port authentication. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Trunking — o Jl 


Trunking is the technique of connecting different VLANs together using a 
single network link. Switches are connected to each other through a router 

or routers. The router then can be used to exchange information between 
switches using the Spanning Tree Protocol (STP). The cable that is used for 
trunking is referred to as the trunk. The ports used for trunking are referred to 
as the trunk ports. 


Router 


Switch-1 


Switch-2 


1 
VLAN-3 VLAN-4 
VLAN—2.7D Switch—3.1F 
Router—3.11 Spanning Tree Protocol—3.3B 


3.3—Explain the advanced features of a switch: PoE, spanning tree, VLAN, 
trunking, port mirroring, and port authentication. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Port Authentication 3.3D 


RADIUS is referred to as a “port authentication” standard. Some switches 
have an advanced feature referred to as “port authentication.” Port 
authentication is a method in which a switch restricts access through a specific 
switch port until access is authenticated by a RADIUS or TACACS + server. 


Authentication server 
Tm 


==> | 7 
=| Server with 


Wired Network 


Supplicant 


Por henticator E Authenticator allows access 


Laptop with only if supplicant is authenticated 
wireless network LESS by the authentication server 
ae Wireless Access Point 

Switch—3.1F RADIUS—6.4D 


TACACS+—6.4E 


3.3—Explain the advanced features of a switch: PoE, spanning tree, VLAN, 
trunking, port mirroring, and port authentication. 
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3.4A 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Wireless Access Point Placement 


In an infrastructure wireless network, the Wireless Access Point (WAP) must 
be in the common overlap area of the wireless network computers. The WAP 
controls all communication. The range of a wireless network can be extended 
by adding additional WAPs. 


Overlap area 


Wireless Access Point 


Range is 
extended 

by adding an 
additional WAP 


802.11 a/b/g/n—1.7A Wireless Access Point—3.1H 


3.4—Implement a basic wireless network: Install client, access point 
placement, install access point (configure appropriate encryption, configure 
channels and frequencies, set ESSID and beacon), and verify installation. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Wireless Access Point Configuration 3.4B 


When configuring a Wireless Access Point, the configuration software 
for the device will prompt for an SSID, security type, and a security key. 


<2 Linksys Easylink Advisor Setup Wizard [exa] 


LINKSYS by Cisco 


SSID 


Waco Give your wireless network a name, also known as an SSID, to help you 
identify your network. 


Name Your Wireless Network 


¿Check Connection 


la Router 


| Configure Router 
| 


LINKSYS by Cisco 


Security í 
type 
Secure Your Wireless Network 
Security | 
Key | Check Connection 


Recommended for new wireless computers and devicas Older wireless 
install Router devices may not suppor this option 
i Q Better Compatibility with legacy devices (WEP-128) 


Recommended for older wireless computers and devices that may not 
support WPA / WPA2 


> D No Security 


Enter a security key with 8-63 characters, or use the randomtly-generated secunty 
key below. 


HBJNELQ4NG El 


© Learn more about network secunt strength 


802.11 a/b/g/n—1.7A Authentication—1.7B 
802.11x and RADIUS—1.7C 
Wireless Channels—1.7E 


Encryption—1.7D 


Wireless Access Point—3.1H 
802.1x—6.4F EAP—6.4H 


3.4—Implement a basic wireless network: Install client, access point 


placement, install access point (configure appropriate encryption, configure 
channels and frequencies, set ESSID and beacon), and verify installation. 
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Description 


Examples 


OSI Model 


4.1A 


The OSI model describes how hardware and software should work 
together to form a network communications system. It serves as a guide for 
troubleshooting and designing networks. The OSI model consists of seven 
layers. Each layer in the OSI model is assigned a specific function. 


OSI Layer 
Application 


Function 


User interface 


Presentation 


Session 


Physical 


Copyright by Goodheart-Willcox Co., Inc. 


Convert to 
common format 
such as ASCII, 
data encryption, 
and compression 


Establish 

and close 
communication 
between two 
nodes 


Coordinates 
communication 


Sequence 
packets 


Ensure error 
free delivery 


Takes over after 
the session has 
been established 


Navigates 
outside of the 
LAN 


Prepares data 
for media access 


Defines frame 
format 


The physical 
aspect of the 
network 


Hardware 


Gateways 


Gateways 


Gateways 
(layer 4 
switches) 


Protocols 


HTTP, FTP, 
WWW, SNAP, 
SMB, SMTP, 
Telnet, POP, 
IMAP 


MPEG, 
WAV, MIDI, 
QuickTime 


Keywords 


Browser, e-mail, 
network applications 


ASCII, Unicode, 
EBCDIC, CODEC, 
and bit order 


NFS, DNS, SQL, 
RPC, NetBIOS, 
X.25, SMB 


TCP, UDP, SPX 


Routers 
(layer 3 
switches) 


Bridges, 
switches, 
Wireless Access 
Points, network 
interface cards 


Copper core 
cable, fiber-optic 
cable, wireless, 
hubs, repeaters, 
transceivers, 
amplifiers, 
transducers 


CompTIA Network+ Reference 


TAIEX 
AppleTalk, ICMP, 
RIP RIPv2, ARP 
OSPF, IGRP, 
RARP BGP, 
NLSP, IS-IS, 
EIRGP 
CSMA/CD, 


CSMA/CA, 
PEDE 


Establish and terminate 
a communication 
session, log on, user 
name, password, 
authentication, assign 
services through port 
numbers 


Segments, 
windowing, flow 
control, transport 
packets, error 
checking (if required), 
port numbers 


IP address, routing, 
packets, datagrams, 
network address, 
packet switching, 
logical address, best 
and shortest route 


MAC address, 
hardware address, 
LLC, CRC, frame 
types, frames, 
topologies, contention 


Bit, byte, cable, 
media, topology, 
transmission, voltage, 
digital signals 


245 


Related 


Application Layer—4.1B Presentation Layer—4.1C 
Concepts 
Session Layer—4.1D Transport Layer—4.1E ( 
Network Layer—4.1F Data Link Layer—4.1G 
Physical Layer—4.1H 
Network+ 4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Objective Layer 2—data link, Layer 3—network, Layer 4—transport, Layer 5—session, 


Layer 6—presentation, and Layer 7—application. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Application Layer 4.1B 


The application layer is the layer of the OSI model that works with specific 
networking applications such as Web browser programs, file transfer 
programs, and e-mail. 


ELE 


De oe em amt ee ee oe 


OSI Model—4.1A 


4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Layer 2—data link, Layer 3—network, Layer 4—transport, Layer 5—session, 
Layer 6—presentation, and Layer 7—application. 
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4.1C Presentation Layer 


Description The presentation layer is the layer of the OSI model that ensures character- 
code recognition. It is responsible for converting character codes into a code 
that is recognizable by a computer that uses a different character code. 


Examples 


ASCII EBCDIC i i 


The presentation layer is concerned with = A a 
negotiating a A set of symbols that o. Sou nal i War ral" A Deihi ; 

ye source and des rination hosts can 7 rei O. 4 fheilh-90"-4 ES i 
nterpret. For example, the content of a AS o ae | 
ee can be in ASCII format or coded Interpreted e TE aS ‘eu: onshecet—~’ ito- i | 
as E6COIC. The two code schemes do > Lo F | ng 


Of- nnd á BE -Of—,,..04 7.” 
directly convert but rather must be ™ ~- er 
interpreted to exchsage data. ae zieng” ae ERA ie fanaa penne 


IBM mainframe 
Related OSI Model—4.1A 
Concepts 
Network+ 4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Objective Layer 2—data link, Layer 3—network, Layer 4— transport, Layer 5—session, 


Layer 6—presentation, and Layer 7—application. 
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Description 


Examples 


Related 
Concepts 


Network+ 
- Objective 
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Session Layer 4.1D 


The session layer is the layer of the OSI model layer that establishes, 
maintains, and terminates the connection with the destination. 


What port should we use? 
How should we synehronize? 
How should we communicate? 


po] 


nil 
Do you still want to communicate? UE 
ii 


NS 


OSI Model—4.1A 


4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Layer 2—data link, Layer 3—network, Layer 4—transport, Layer 5—session, 
Layer 6—presentation, and Layer 7—application. 
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4.1E Transport Layer 


Description The transport layer is a layer of the OSI model layer that ensures reliable data 
by sequencing packets and reassembling them into their correct order. 


Examples y 


What segment size should we use? 


What window size should we use? 


How often should an acknowledgment be sent? 


nelated OSI Model—4.1A 

Concepts 

Network+ 4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Objective Layer 2—data link, Layer 3—network, Layer 4—transport, Layer 5—session, 


Layer 6—presentation, and Layer 7—application. 
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Description 


Examples 


Related 
_ Concepts 


Network+ 
Objective 


Network Layer 4.1F 


The network layer is a layer of the OSI model layer that is responsible for 
routing packets from one network to another using the IP addressing format. 


Router 
128.50.0.1 es 


Navigation through IP addresses ¡Router 


== 


134.96.0.1 


en ES 
128.50.0.2 


OSI Model—4.1A 


4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Layer 2—data link, Layer 3—network, Layer 4—transport, Layer 5—session, 
Layer 6—presentation, and Layer 7—application. 


Copyright by Goodheart-Willcox Co., Inc. CompTIA Network+ Reference 25i 


4.1G 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Data Link Layer 


The data link layer is a layer of the OSI model layer that describes 
how the raw data is packaged for transfer from one network 
interface card to another. The data link layer contains information 
such as the addresses of the source and destination and the size 
of the packet. The data link layer provides for error checking. 


e Frames the content of the 
upper layers. 

Frames the MAC address. 
Ensures reliability of 
physical connection. 
Performs CRC. 


Data link layer 


® Converts frame into a 
series of digital pulses. 


Performs collision avoidance. 


Performs contention resolution. 


Prepares for half-duplex or 
full-duplex transmission 
based on media type. _ _ 


MAC Address—1.3A OSI Model—4.1A 


4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Layer 2—data link, Layer 3—network, Layer 4— transport, Layer 5—session, 
Layer 6—presentation, and Layer 7—application. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Physical Layer 4.1H 


The physical layer is a layer of the OSI model that provides the path for the 
raw digital pulses that are moved along cables and connectors. The various 
network topologies and IEEE standards for equipment are also identified at 
this layer. Exact dimensions of connectors, materials, voltage level, frequency, 
data rates, Baseband and Broadband signaling techniques, and any other 
concerns about the physical communications circuit between the destination 
and source is described at this layer. 


Dimensions 
Frequency 
Data rate 
Signaling 
techniques 
Broadband 
Baseband 
Twisted Pair Cable—2.1A Fiber-Optic Cable—2.1C 
Coaxial Cable—2.1E Network Connector Types—2.2A 


Network Topologies—2.3A OSI Model—4.1A 


4.1—Explain the function of each layer of the OSI model: Layer 1—physical, 
Layer 2—data link, Layer 3—network, Layer 4— transport, Layer 5—session, 
Layer 6—presentation, and Layer 7—application. 
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4.2A Physical and Logical Network Diagrams 


Description There are many utilities and case studies available to help with network 


design. A network designer can use the Microsoft Visio program to design the 
physical structure and directory structure of a network. 


icra: etai 210.1. 

Examples Fe om z 
[D> sapaar aes] arole NRA E NE -|o 
= > Aria + it. + [BZ a bra == Be, 

nn. ae a ae ey Pel Heo Fae 


Sues Arh mls. 
7 ema » [No Layer} dl Q-a@-B- 
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Related Configuration Management Documentation—4.3A 

Concepts 

Network+ 4.2—Identify types of configuration management documentation: Wiring 

Objective schematics; physical and logical network diagrams; baselines; policies, 
procedures, and configurations; and regulations. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Baselines 4.2B 


A baseline is a measurement of performance characteristics that can be used 
at a later date to objectively determine if the network or server is performing 
satisfactorily. Baseline of the system should be established as soon as a new 
network or server is installed and is operational. After that, the baseline 
information should be routinely collected and reviewed to predict events that 
could affect network or server performance. 


Network Segment ID 


Date and Time Period 


"ECT TM E 
TA I 
LA A S O 
a a O O 
re e AA 
| A 
EP 
a aa 
== o o l 


ee sh 


Network Monitoring Utilities—4.4A 


4.2—Identify types of configuration management documentation: Wiring 
schematics; physical and logical network diagrams; baselines; policies, 
procedures, and configurations; and regulations. 
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4.2C Policies, Procedures, and Configurations 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Anetwork administrator’s best protection for the network is a combination of 
user policies and antivirus software. Policies outline how users are to use and 
not use their workstation and the network. Basically, policies and procedures 
are a list of dos and don’ts for the user. Typically, these are called an Acceptable 
Use Policy. An Acceptable Use Policy helps protect a system against malware. 


Acceptable Use Policy 


Do not open any e-mail file attachments from 
unknown sources. 


Do not download any files from unknown sources. 
Update antivirus software on a regular basis. 
Never open e-mail advertisements, chain letters, 
or junk mail. 

Do not click icons embedded in files or e-mails. 

Do not open any e-mail attachments with an exe, 
com, bat, vbs, shs, pif, ovl extension or double 
extensions such as in GreatPicture.jpg.exe. If you 
doubt the authenticity of an e-mail, check with the 


indicated source before opening the e-mail, 
especially an attachment. 


eee 
Configuration Management Documentation—4.3A 
———— 


4.2—Identify types of configuration management documentation: Wiring 
schematics; physical and logical network diagrams; baselines; policies, 
procedures, and configurations; and regulations. 


256 Networking Fundamentals Study Guide 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Regulations 


4.2D 


There are several security standards and laws aimed at securing user personal 
data such as medical records, banking records, health records, and credit card 
information. Many states have their own laws related to personal data security. 


Regulation 
Health Insurance 
Portability and 
Accountability Act 
(HIPAA) 


Payment Card 
Industry Data 
Security Standard 
(PCI DSS) 


California SB 1386 Act 


Descriptions 


A set of standards designed to protect health records. 


A set of credit card security standards designed to protect 
credit card information. 


A legislative act that requires all organizations that own or 
have access to personal information of California residents 
to notify the person of any breach of security of his or her 
personal data. 


Sarbanes-Oxley (SOX) 


A legislative act that imposes standards on financial 
institutions to secure personal financial records. As part 
of the legislative act, the IT portion of the organization is 
required to perform routine security checks of the network 
system and data storage. 


Intrusion Detection and Intrusion Prevention Systems—6.1A 


Common Firewall Features—6.2A 


4.2—Identify types of configuration management documentation: Wiring 
schematics; physical and logical network diagrams; baselines; policies, 
procedures, and configurations; and regulations. 
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4.3A Configuration Management Documentation 


Description Always keep an up-to-date and complete set of documentation for the existing 
network and associated equipment. One of the most important items to assist 
you when troubleshooting a large network system is a detailed site plan that 
has all of the major networking devices identified. Documentation also acts 
as a history of the system. For example, if a network interface card is replaced 
by another brand or version, you have a record available. The record can be 
used to update equipment inventories and equipment descriptions. Software 
programs, such as HelpSTAR, are available to help an administrator keep 
track of service requests, computer inventory, and history. 


Exam ples | z * ia ao + Company Request History - Lakspur Technologies Inc 


y Request View/Lookup Project 


fpñecent updacessie OE ff 


i 4 ` áf) chronological Order |! SetCurrent Restore System | 
Ri Meria Only: || View as Default Defaults 


Prespa Pane Defa lt Settings 


Tir ed “rats Requester Prac p ere Laparan i a 


Cueto 9. Chee (2 | tm x Lr LOSS PM i Dispatcn anm pks. ~ : 

Printer not Printing 4/22/2009 11.29 AM In Dispatch Timm Thomas [NONE] Printers 

Cannot Connect to VPN 4/22/2009 11:09 AM In Queue Malcom Worthington I! [NONE] Network Support 

Cannot Pick up Mail 4/8/2009 9:09AM In Queue Bob Stevens [NONE] Microsoft Outlook 

Mail Server is Down 4/8/20099'05 AM In Service Peter Adams Peter Adams Microsoft Outlook 

Complete Change 4/8/2009 8:54 AM = InQueue Alfred Damo [NONE] Change Management 
A(R O00 ASS ahd finsed Alfred Camo II 


£ Richard — Tech Support Logged On 4/1/2010 6 0555 AM 


Change 


25 Workflow 
- Forwarded to DISPATCH 
- Email NONE Selected 


E memo (Request Service) 
- Time worked: 1 min 42 secs Worked on 01-Apr-10 


When | try to connect to the internet, | get the following 


PF Atdvows cat vail Wide 


Do eros 


Total 14 Requests 


HelpSTAR 
Related Physical and Logical Network Diagrams—4.2A Baselines—4.2B 
Concepts 
Network+ 4.3—Given a scenario, evaluate the network based on configuration 
O bjective management documentation: Compare wiring schematics, physical and logical 


network diagrams, baselines, policies and procedures, and configurations to 
network devices and infrastructure. Update wiring schematics, physical and 
logical network diagrams, configurations, and job logs as needed. 
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Network Monitoring Utilities 4.4A 


Description Network events need to be monitored to detect and predict problems. The 
exact problems can vary a great deal, from simple user problems to detecting 
an intruder’s attempts to break into the system. All major operating systems 
have monitoring utilities. There are also many good third-party tools 
available. Monitoring tools not only monitor events but also record the events 
into a log, which is then saved as a file. Event logs can be used to assist in 
analyzing system problems involving hardware, software, and security issues. 


Exam ples Monitoring Utility Windows OS Description 


Performance Monitor | Windows Vista Can be used to predict system 

or Reliability and Windows 7 failure or to isolate the cause of poor 

Performance Monitor Windows Server 2008 R2 performance. When used properly, 
the administrator can schedule 
routine hardware replacements, 
additions, and upgrades that will 
minimally affect user access. Can 
also be configured to send alerts 
to the system administrator when 
resources are critical. 


Windows Task Windows XP Provides a quick view of system 
Manager Windows Vista performance and can also show 
what software applications, 
Windows 7 


processes, and services are 
Windows Server 2003 running. 


Windows Server 2008 
Microsoft Network | Windows XP SP3 A full protocol analyzer with 
Monitor Windows XP 64-bit many features found only in very 


Windows Vista SP1 expensive third-party protocol 
analyzers. It can be used to 


Windows Vista 64-bit establish a baseline of information 
editions SP1 about network performance. 
Windows 7 Microsoft Network Monitor is not 


Windows Server 2003 SP2 | installed by default but can be 


downloaded from the Microsoft 


Windows Server 2003 SP2 | Web site for free. 


64-bit edition 
Windows Server 2008 
Windows Server 2008 R2 


Windows Server 2008 R2 
(Itanium-based systems) 


Event Viewer Windows XP Records events that occur during 
Windows Vista the operation of the server or 
É desktop system. Some typical events 
wise ae are Da or a ofa 
Windows Server 2003 service, user logon activities, share 
Windows Server 2008 access, file access, and hardware 
and software information. Event 
Viewer is an excellent utility for 
troubleshooting system failures. 
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Related Baselines—4.2B Configuration Management Documentation—4.3A 


Concepts € 
Network+ 4.4—Conduct network monitoring to identify performance and connectivity 
Objective issues using the following: Network monitoring utilities (packet sniffers, 


connectivity software, load testing, throughput testers) and system logs, 
history logs, and event logs. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Network Performance Optimization 


4.5A 


Methods such as traffic shaping; incorporating the QoS protocol, caching 
engines, fault tolerant devices; load balancing; and increasing the amount of 
server resources can be used to overcome network performance problems. 


Performance 
Optimization Method 


Traffic Shaping 


Quality of Service 
(QoS) Protocol 


Load Balancing 


High Availability 


Caching Engines 


Fault Tolerance 


Reason or Need 


VoIP and video 
applications and 
latency sensitivity 


VoIP and video 
applications and 
latency sensitivity 


High-bandwidth 
applications 


High-bandwidth 
applications 


Description 


Prioritizes network packets to ensure 
quality of service for time-sensitive 
applications such as VoIP. 


Developed to minimize latency, the QoS 
protocol gives time-sensitive packets, 
such as those carrying telephone 
conversations, a higher priority than 
data packets. 


Balances the demand of network clients 
to utilize system resources such as files 
or CPU processing by adding more 
servers to share the processing load. 


Increasing the amount of server 
resources available to users by adding 
more memory or configuring more 
hard disk drives and mapping users to 
the additional drives. 


High-bandwidth 
applications 


Load Balancer—3.2C 


Network proxy servers can be used to 
store IP and URL addresses in their 
cache to expedite the connection process. 


A system's ability to continue operation 
during a system hardware or software 
error can be achieved with some RAID 
systems, server clustering, and UPS units. 


4.5—Explain different methods and rationales for network performance 
optimization: Methods (QoS, traffic shaping, load balancing, high availability, 
caching engines, fault tolerance), reasons (latency sensitivity, high-bandwidth 
applications, VoIP, video applications), and uptime. 
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4.6A Network Troubleshooting Methodology 


Description A troubleshooting strategy is a general list of steps to follow when presented 
with a problem scenario. CompTIA suggests nine steps for troubleshooting a 
network problem. 


Examples Given a scenario, implement the following network troubleshooting methodology: 
1. Information gathering—identify symptoms and problems. 
2. Identify the affected areas of the network. 
3. Determine if anything has changed. 
4. Establish the most probable cause. 
5. Determine if escalation is necessary. l 
6. Create an action plan and solution identifying potential effects. 
7. Implement and test the solution, 
8. Identify the results and effects of the solution. 
9. Document the solution and the entire process. 
ee Troubleshooting Connectivity Issues—4.7A Traceroute/Tracert—5.1A 
SIMA Ipconfig/Ifconfig—5.1B Ping—5.1C 
ARP—5.1D Nslookup—5.1E 
Pathping—5.1F Route—5.1G 
Nbtstat—5.1H Netstat—5.1I 
Network Hardware Tools—5.3A 
Network+ 4.6—Given a scenario, implement the following network troubleshooting 
Objective methodology: Information gathering—identify symptoms and problems, 


identify the affected areas of the network, determine if anything has changed, 
establish the most probable cause, determine if escalation is necessary, create 
an action plan and solution identifying potential effects, implement and test 
the solution, identify the results and effects of the solution, and document the 
solution and the entire process. 


262 Networking Fundamentals Study Guide 


Troubleshooting Connectivity Issues 4.7A 


Description Connectivity problems include physical issues, logical issues, and wireless 
issues. If an issue is beyond the technician's expertise, the issue should be 
escalated to someone with the appropriate expertise. 


Examples Connectivity Issue Description 

Physical Issues 

Crosstalk Interference that comes from neighboring conductors 
inside a wire’s insulating jacket. 

Near-End Crosstalk A measurement of the reflected loss at the near end, or 
input end, of a cable. = 

Attenuation The loss of signal strength. 

Collision A condition that occurs when two computers transmit 
data at the same time. 


Short A wiring fault that occurs in cabling when two 
conductors are improperly connected, resulting in a 
shorter circuit path. 


A wiring fault that occurs when the length of a 
conductor has an open spot. 


Impedance mismatch (echo) | The effect of connecting two different electronic audio 


systems that have different electronic characteristics. 


Interference An undesired electromagnetic signal imposed on a 


desired signal that distorts or corrupts the desired 
signal. 


Logical Issues 


Port duplex mismatch When one device is configured to communicate 
in full-duplex mode and the other device in 


half-duplex mode. 


Incorrect VLAN An incorrectly-configured VLAN assignment, 
commonly due to technician error when configuring 


the switch. 


A host with an incorrect IP address may not be able 
to access other hosts on the network or may not be 
recognized by the security system. 


A host configured with the wrong gateway address 
will not be able to access the Internet. 


Configuring a host for the wrong DNS server can 
cause Internet access problems. 


Incorrect IP address 


Wrong gateway 


Wrong DNS 


Configuring a host for the wrong subnet mask can 
prevent the host from accessing hosts on the local 
network. 


Wrong subnet mask 


(Continued.) 
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Connectivity Issue Description 
Wireless Issues 


Interference Packet loss is generally caused by radio interference 
or excessive distance between two devices. 


Incorrect encryption When encryption is enabled on a wireless device 
such as a WAP, all devices expected to communicate 
with the WAP must have a matching encryption 
passphrase or security key. 


Incorrect channel For wireless devices to be able to communicate with 
one another, all devices must use the same channel. 


ESSID mismatch When two or more Wireless Access Points (WAPs) are 
used to support roaming and are connected to a common 
wired network, they must have matching SSIDs. 


Distance Packet loss is generally caused by radio interference 
or excessive distance between two devices. 


Bounce A condition where a wireless signal reflects off metal 
objects, some types of glass, and certain building 
materials, thus corrupting the wireless signal. 


Incorrect antenna placement | For nodes to communicate with each other on a 
wireless network, all nodes must be inside the same 
broadcast area. 


Related Network Troubleshooting Methodology—4.6A  Traceroute/Tracert—5.1A 
Concepts Ipconfig/Tfconfig—5.1B Ping—5.1C 
Pathping—5.1F Route—5.1G 
Network Hardware Tools—5.3A 
Network+ 4.7—Given a scenario, troubleshoot common connectivity issues and select 
Objective an appropriate solution: Physical issues (crosstalk, near-end crosstalk, 


attenuation, collisions, shorts, open, impedance mismatch, interference), 
logical issues (port speed, port duplex mismatch, incorrect VLAN, incorrect IP 
address, wrong gateway, wrong DNS, wrong subnet mask), issues that should 
be identified but escalated (switching loop, routing loop, route problems, 
proxy ARP, broadcast storms), and wireless issues (interference, incorrect 
encryption, incorrect channel, incorrect frequency, ESSID mismatch, standard 
mismatch, distance, bounce, incorrect antenna placement). 
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5.1A 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Traceroute/Tracert 


The traceroute /tracert utility is good for troubleshooting a path to a distant 
destination. The trace route utility also displays the approximate hop lapse 
times between points along the route. The amount of time delay can help 
analyze network failure or problems caused by excessive time delays. 

The traceroute command is used on UNIX/Linux systems, and the tracert 
command is used on Microsoft systems. 


Analyze network failure or problems caused by excessive time delays. 
Cra jee e ej aj 


to wove «E 11% 
vakinum. of 30. hops: 


Next Hop—1.6C Routing Tables—1.6D 
Router—3.11 Network Troubleshooting 
Methodology—4.6A 


Troubleshooting Connectivity Issues—4.7A Pathping—5.1F 
Route—5.1G 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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5.1B Ipconfig/Ifconfig 


Description Windows operating systems use the ipconfig command issued from the 
command prompt to run the IP Configuration utility. The assigned IPv4 
address, the subnet mask, and the default gateway address are displayed. To 
reveal more information about the connection, use the ipconfig/all command. 
UNIX/Linux operating systems use the ifconfig command. 


Examples Verify assigned IP address subnet mask and default gateway. 


ca. C:\Windows \system32 onda 


icrosoft Windows [Version 6.0.6002] 
opyright (c> 2896 Microsoft Corporation. All rights reserved. 


¿NUsersMRichard>ipconfig 


indows IP Configuration 


ireless LAN adapter Wireless Network Connection: 


Connection-specific DNS Suffix . : hsdi.fl.comcast.ne 

Link-local IPv6 Address z fe8B::8c62:h6aa: bad: 22b1:108 
IPv4 Address 

Subnet Mask 

Default Gateway z 192.168.1.1 


unnel adapter Local Area Connection% 6: 


Media State : Media disconnected 
Connection-specific DNS Suffix . : hsd1.fl.comcast.net. 


unnel adapter Local Area Connectionx* 9: 
Connection, specifie DNS Suffix . : 
IPv6 Addres > 2601 :8:4137:9e50:34a2:3£47:3f57:fe9?7 
Link- tacai 1Pué Address z fe80::34a2:3147:3£57:fe97:9 
Default Gateway sos: 


=\Users\Richard>, 


Related MAC Address—1.3A IPv4 Address—1.3B 
Concepts 
IPv6 Address—1.3C Network Troubleshooting 
Methodology—4.6A 
Troubleshooting Connectivity Issues—4.7A 
Network+ 5.1—Given a scenario, select the appropriate command line interface tool and 
Objective interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 


arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Ping 54C 


The ping command is used to verify that a connection exists between the 
destination and the source. It is also used to verify that the TCP/IP protocol is 
configured for the network interface card at the host and to check the proper 
operation of the network interface card. 


Check proper operation of the network interface card. 


Ci CA WINDOWS! system32! command.com 


Microsoft<R> Windows DOS 
CCCopyright Microsoft Corp 1998-2081. 


C:\DOCUME™1>ping localhost 
Pinging EDIT84.gwp.com [127.0.Ø.1] with 32 bytes of data: 


bytes=32 time<ims TTL=64 
bytes=32 time<ims TTL=64 
bytes=32 time<ims TTL=64 
bytes=32 time<ims TTL=64 


Reply from 1: 
Reply from 1: 


Reply from 127.B.B. 
Reply from 127.0.8. 


Ping statistics for 127.0.0.1: 

Packets: Sent = 4, Received = 4, Lost = Ø (Ax loss>. 
Approximate round trip times in milli-seconds: 

Minimum = Bms, Maximum = Gms. Average = Gms 


C=\DOCUME™1 > 


Check connection state of network. 


C:\>ping 192.168.1141 
Pinging 192.168.1.1 with 32 bytes of data: 


Reply from 
Reply from 
Reply fron 
Reply from 


192.168.1. 
192.168.1. 
192.168.1. 
192.168.1. 


1: bytes=32 time<ims TTL=158 
1: byutes=32 time<ims TTL=15B 
1: bytes=32 time<ims TTL=150 
1: bytes=32 time<ims TTL=156 


Ping statistics for 192.168.1.1: 
Packets: Sent = 4. Received = 4. Lost 
Approximate round trip times in milli-seconds: 
Minimum = Sms, Maximum = Oms,. Average Bins 


6 Az loss>., 


IPv6 Address—1.3C 


Network Troubleshooting 
Methodology—4.6A 


Pathping—5.1F 


IPv4 Address—1.3B 
NIC—3.1D 


Troubleshooting Connectivity 
Issues—4.7A 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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5.1D 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


ARP 


The arp command lists entries in the ARP cache. It can be used to 
troubleshoot problems with multiple IP assignments and to solve host 
communications problems. 


Solve host communication problems. 
Identify stations with multiple IP addresses. 


E Cammand Prompt 
Vs rl A ae a 
Microsoft Windows 2000 [ 
CO) Copyright 198-1999 
-\7arp -a 


F 
Iw ce 92.168.8.3 on Interface 
: : ddress Physical fide 


HU-2U-78 -W7 
Ba all-ce~% 


Networking Protocols—1.1A IPv4 Address—1.3B 


IPv6 Address—1.3C Network Troubleshooting 
Methodology—4.6A 


Troubleshooting Connectivity Issues—4.7A 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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6 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Nslookup _ © 5AE 


The nslookup command is a UNIX/Linux utility used to query domain 
servers when seeking information about domain names and IP addresses. The 
nslookup command maps, or resolves, domain names to IP addresses. This is a 
convenient tool when looking for information about a particular domain or IP 
addresses. Two UNIX/Linux tools that perform a similar function as nslookup 
are dig (Domain Information Digger) and host. 


Query a domain server about a domain name. 


z Command Prompt - nslookup EE IT dE 
mA SE So > - 


E 


Microsoft Windows [Version 6.1.7600] 
opyright <c) 2669 Microsoft Corporation. All rights reserved. 
=\Wsers\Richard>ns lookup 


Default Server: cns.bonitasprngs-.f1l_naples.comcast -net 
Address: 68.87.74.166 


Pp 


a 
$ A A A —foeenest 


IPv4 Address—1.3B DNS Server—3.2E 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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SEE" 


Description The pathping command is a combination of the ping and tracert commands. 
It sends an ICMP echo request message to all routers and gateways along the 
path to the destination address. The results are quite detailed when compared 
with ping or tracert and help to identify the exact device causing the bottleneck. 


UNIX/Linux systems use a similar command as pathping called mtr. 


Examples Identify the source of network latency. 


=\Users\Richard>pathping wew.rmroberts.com 


racing route to www. kaeo ports. com [65.254.254.341 
ver a maximum of 3 
9 ROSS -hsd: SiL comcast.net. [192.168.1.1881 
192 T 


73.17.116.1 
ge-2-2-sr8l.sebring.f1.vestf1l.comcast.net [68.86.199.77] 
te-3-2-srði .arcadia.fl.westfl.comeast.net [68.87.238.195) 
te-9-4-ur8l .portcharlott-£f1.vestfl.comcast.net [68.87.238.161] 
te-8-2-urBl .northport.f1. westfl.comcast.net 168.87.238.65] 
te-8-4-ar82 .venice-f1.vestfl.comcast.net [68.87.238.251 
te-4-2-arB1 .bonitasprngs -f1.naples.comcast.net [68.86.164.57] 
te-9-1-arB2.bonitasprngs .fl.naples.comeast.net [68.87.236.1M6 ] 
Ø  te-8-2-8-5-ar83.northdade. F1.pompano.comcast.net [68.85.229.2531 
pos-@-3-8-@-cr@1 .miami.f1.ibone.comcast.net [68.86.91.221] 
pos-2-4-B-B-cról1.atlanta.ga.ibone.comcast.net [68.86.86.1971 
pos-9-2-B-0-peBl .S6marietta.ga.ibone.comcast.net [69.86.86.166) 
te4-2.ccr@i.at1@2.atlas.cogentco.com [154.54.10.233] 
te?-4.ccrBl.2t181.atlas.cogentco.com [154.54.@.165] 
te@-2- -9-3.cor21.dcaBl .at las .cogentco.com (1$4.54.24.9] 
te@-1-@-3 .ccr21.jfk82.atlas.cogentco.com [154.54.5.245] 
te2—-2.ccr@2.bos@1.atlas.cogentco.com [154.54.5.242] 
66.28 .52.154 
Endurance Internat ionalGroup.demarc .cogentco.com [38.112.14.62] 
= * 


“Computing statistics for 580 seconds... 
Source to Here This Node/Link 
Hop RIT Lost/Sent = Pct Lost/Sent = Pct Addre 
3 0 Richard-PCwin7. hsdi.fl.comcast.net. [192.168.1.188] 
8z i 
(A ARAA 


z 73.17.116.1 
, cul Gr 168.86.199.772] 


Bms 


i te-3-2-srBl.arcadia.fl.westfl.comcast.net (68.87.238.185] 

l. i 

1 te-9~4-ur@1 .portcharlott .fl.westfl.comcast .net (68 .87.238.181] 
E O A O EOS OG [68 .87.238.65] 

3 te-8-4-ar82.venice.fl.vestfl.comcast net 168.97.238.25] 

7 te-4-2-arl .bonitasprags .£1.naples -comcast.net [68 -86.164.57] 


nuboso 


A FM ew NM e 


z CRI A AO no. ea TÍ (68 .97.236.186 1 


pe 
Ss 


A A DO meister Omnimrens) COREE m (68 .85.229.253] 
a pos-8-3-B-8-cról.miami.fl.ibone.concast.net 168.86.91.221) 

% pos-2-4-8-B-cr@i .atlanta.ga.ibone.comcast net [68.86 .86.1971 

i Ee See eee ae eae areca on oe (68.86 .86.166) 
bio A O ah (154.54.18.233] 

2 te?-4.ccr@1-at1@1.at las .cagentco.com [154.54.80.165] 


pa 
we 


pop pop 
na wN 
nana 


42ms 
48ms 
53ms 
72m3 
68ns 
28 6Bms 


race complete. 


pa 
o 


z teB-2-8-3.ccr21.dca01.atlas.cogenteo.com (154.54.24.91 
te8-1-8-3.ccr21. jEK82.atlas .cogentco.com 1154.54,5.2451] 
e CHI OTS [154.54.5.2421 
E 
Endurance InternationalGroup.demarc .cogentco.com [38.112.14.62] 


fe ph pa 
2 oN 


MN noone 


:\Users\Richard> 


Related 


IPv4 Address—1.3B Next Hop—1.6C 
Concepts 


Routing Tables—1.6D NIC—3.1D 


Router—3.11 Network Troubleshooting 
Methodology—4.6A 
Troubleshooting Connectivity Issues—4.7A Traceroute/Tracert—5.1A 
Ping—5.1C 
ee UU 


Network+ 5.1—Given a scenario, select the appropriate command line interface tool and 
Obj ective interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Route 5.1G 


The route command is used to view information contained in the local routing 
table. The route print command displays both IPv4 and IPv6 addresses, subnet 
masks, the default gateway, and the assigned IP address of the default gateway. 


View information contained in the local routing table. 


a 


= : er = 
ard>route print P 
ammm Scussnese== Sosa A | 
13...08 26 is IA A Realtek PCI GBE Family Controller | 
11...00 26 18 fd 58 da ...... Realtek PCle GBE Family Controller 
a ds ls de ¡de Software Loopback Interface 1 k 
ada G0" GaGa co Microsoft ISATAP Adapter | 
ee be BƏ 66 68 GG eO Microsoft ISATAP Adapter #2 | 
Ba a ag UB 09 BƏ eð Teredo Tunneling Pseudo- Interface 
a cearcan A 
twork Destination Netmask Gateway Interface Metric 
0.0.0.8 0.0.0.0 192.168.1.1 192.168.1.18908 18 
1272: 8.8.08 255.0.0.0 On-link 127.0.0.1 306 
j 6.8. 255.255.255.255 On— link 127.0.0.1 306 
1277 255. 2561256 255.255.255.255 On-link 127.0.0.1 306 
169.254.0.8 255.255.0.6 On-link 192.168.1.100 286 
4 169.254.255.255 255.255.255.255 On-link 192.168 .1.100 266 
92.1 8 55.255.255.8 On—link 192.168.1.198 266 
192.168.1.108 255.255.255.25' On-—link 192.168.1.198 266 
192.168.1.255 255.255.255.255 On-link 192.168.1.168 266 
224.0.0.8 240.0.8.8 On-link 127.0.0.1 306 
224.0.0.8 248.0.8.8 On—link 192.168 .1.168 266 
255.258.255.255 255.255.255.255 On-link 127.0.0.1 306 
' 255.255. 255. 255 255. -255.. 255. 255 On-link 192.168 .1.168 266 
Persistent Routes: 
d 
JIPv6 Route Table | 
Wet ive Routes: : 
Bf tric Network Destination Gateway ‘ f 
15 58 ::/8 On-link et 
1 3906 ::1/1289 On—-1link _§ 
15 58 2081::/32 On—link 
715 306 2001 :8:4137:9e74:104b:b3d:51c5 :bdcc/128 Í 
On-link 
11 266 fe80::/64 On-link y 
15 306 fe8B::/64 On—link E 
15 306 fe88::184b:b3d:510c5 :bdcc/128 a | 
n—link : l 
ii 266 fe8B::79£4:e812:74b4:5f1/128 4 K 
On-link BE 
386 ££80::/8 On-link ] 
15 306 f£f0B::/8 On—-link 
11 266 _ff09-:/8 CU LAr jee —- 
Persistent ma 
f :\Users\Richard> E 
| 
P a] D 
IPv4 Address—1.3B IPv6 Address—1.3C 
Next Hop—1.6C Routing Tables—1.6D 
Router—3.1I Network Troubleshooting 
Methodology—4.6A 
Troubleshooting Connectivity Issues—4.7A Pathping—5.1F 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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5.1H 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Nbtstat 


The nbtstat command displays NetBIOS over TCP/IP statistics and 
information gathered from broadcasts, NetBIOS cache, and WINS services. 
It can be a very handy tool for verifying that the WINS server is functioning 
properly or that NetBIOS over TCP has been configured correctly for the 
network interface card. 


Verify WINS server is functioning. 
Verify NetBIOS over TCP has been em i 


Command dPrompt 


F:i\>onbtstat -p 


Local Area Connection: 
Node IpAddress: 1192.168.B.3] Scape Id: (1 


NetBIOS Local Name Table 
Mame pes Status 


MULTI BOOT <o> cel Registered 
NETWORKFUNDCLAS <Ø? E Registere 
CEP 


4 ? re 
> UNIQUE Reqists eed 


IPv4 Address—1.3B NIC—3.1D 
Network Troubleshooting Troubleshooting Connectivity 
Methodology—4.6A Issues—4.7A 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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Netstat = ee 5a 


The netstat command displays information about active TCP/IP connections. 

The netstat command displays Ethernet statistics for IP, TCP, ICMP, and UDP for 
IPv4 and IPv6. It can be used to determine network problems such as excessive 
broadcasts on the network. It also allows the user to monitor network connections. 


Identify excessive broadcasts. Monitor network connections. Check the status of a service. 


STAT A E OS OREN OR LER 
icrosoft Windows [Version 6.1.76001 
[Copyright <c) 2009 Microsoft Corporation. All rights reserved. 


aC:\Users\Richard>netstat —e 
Interface Statistics 


Received Sent 

ytes 852853416 741668185 

nicast packets 2023435 2461396 
on—unicast packets 242128 
8 


@ 8 
nknown protocols B 


#C:\Users\Richard> 


E E TT eisai wines tall oe yor sent re ated 


tNUsers\Richard>netstat -s —p ip 
IPu4 Statistics 


Packets Received 

Received Header Errors 
Received Address Errors 
Datagrams Forwarded 
Unknown Protocols Received 
Received Packets Discarded 


y 
o 


Received Packets Delivered 
Output Requests 

7 Routing Discards 
Discarded Output Packets 

tput Packet No Route 

Reassembly Required 
Reassembly Successful 
Reassembly Failures 
Datagrams Successfully Fragmented 
Datagrams Failing Fragmentation 
Fragments Create 


:NUsers\Richard> 


awn 
non 
nu 
w 
mn 


w 


MAN 


SSSocseshrusreqesw 


netstat switch Description 


Displays statistics by protocol. 


Displays contents of routing table. 


-S 
T 
/? 


Displays help. 


Port Numbers—1.2A 


Network Troubleshooting 
Methodology—4.6A 


Port Scanner—5.2D 


Networking Protocols—1.1A 
IPv4 Address—1.3B 


Troubleshooting Connectivity Issues—4.7A 


5.1—Given a scenario, select the appropriate command line interface tool and 
interpret the output to verify functionality: traceroute, ipconfig, ifconfig, ping, 
arp, nslookup, hostname, dig, mtr, route, nbtstat, and netstat. 
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5.2A Packet Sniffers 


Description A packet sniffer is a network monitoring utility that captures data packets 
as they travel across a network. A packet sniffer provides a vast amount of 
information such as packet size, protocol, and the source and destination 


address expressed as an IP address and a MAC address. 


ASnitler [Ex] 


| ele view Capture Fiter Tools Hep 
joo, 2 Qi > 3 [ol 


5d 


Examples 


Í Attributes JN Lime MAC source MAC dest Frame Protocol 1P a] 
B Y MACO E 2 2hil7m:4s:834ms  44,45.53.54.00,00  20.53,52.43.00.00 DOD IP (08... UDP/IP 20 
| [© Source: 44,45:53,54,00,00 |3 2h:L7m:Ss: 92ms  20,53.52,43.00.00 44.45.53.54.00.00 DOD IP (08... UDP/IP 20 
| [O Destination: 20,53.52,43.0c|4 | 2hil7m:Ss:9Sms  44.45,53.54.00.00 FF.FF.FF.FF.FF.FE ARP (0806) 
| S  2hil7miSs: 107ms  44.45.53.54.00.00  20.53.52.43.00.00 DOO IP (08... TCP/IP 20 
MESS Tre Doar (0000) 6  2h:l7m:Ss:39ms  20.53.52.43.00.00  44.45.53.54.00.00 DODIP(08... TCP/IP 20 
E Y IPv4 header 7 2hil7m:5s: 408ms — 44.45.53.54.00,00  20.53.52.43.00.00  DODIP(08... TCP/IP. 20 
| 1-0 Source IP: 209,26.168.219 |g  2h:17m:5s: 424ms  44.45.53.54.00.00 20.53.52.43.00.00 DODIP(08... TCP/IP 2 
|- @ Destination IP: 205.160,247}9 — 2h:17m:Ss: 814ms  20.53:52.43.00.00  44:45.53.54.00.00 OOO IP (G8... TCP/IP 20 
@ Version: 4 10 2h:l?miSs: 934ms —44,45.53540000 20.53.52 43.00.00 20 
0] Header length: 5 ated S Lee 44.495,53 54.00.00 20.53.5 $3.00 00 PIP a) 
[-@ Type of service: 0 Anit7miés: 104ms — 44.45.53.54.00,00 205352430000 OODIP(08. TCAP PF. 
0 1d paisa 2h:17m:65; 313ms  20.53,52,43.00.00 _44.45,53.54.00.00 DOD IP (08... TCP/IP ae 


Packat content a 
096 70 70 6C 69 63 61 74 69 6F GE 2F 76 GE 64 2E pplication/vnd. aj 
| OAS 6D 73 2D 65 78 63 65 6C 2C 20 61 70 70 6C 69 pa-excel, eppli 
| l 0B4 63 61 74 69 GF GE 2F 6D 73 77 6F 72 64 2C 20 Bacion/asword, 
are OC3 61 70 70 6C 69 63 61 74 69 GF GE 2F 76 SE 64 epplication/und 
o 6D 73 2D 70 6F 77 65 72 70 6F 69 GE 74 2C .ms-poverpoint, 
Pack 0 2A 2F 2A OD OA 52 65 66 65 72 65 72 3A 20 */*..Referer: 
acket e 74 74 70 3A 2F 2F 73 74 72 61 74 6F 2E 6E http: //strato.n 
o > y { 74 2F OD OA 41 63 63 65 70 74 2D 4C 61 6E et/..accept-Lan 
information | $ 75 61 67 65 3A 20 65 SE 2D 75 73 OD OA 4} guage: en-us..A 
: 63 65 70 74 2D 45 SE 63 6F 64 69 SE 67 3A ccept-Encoding: 
9 67 7A 69 70 2C 20 64 65 66 6C 61 74 65 OD gzip, deflate. 
49 66 2D 4D 6F 64 69 66 69 65 64 2D 53 69 .If-Modified-Si 
63 65 3A 20 57 65 64 2C 20 30 35 20 44 65 nce: Wed, 05 De 


de 


Related 


Networking Protocols—11A Port Numbers—1.2A 
Concepts 


MAC Address—1.3A IPv4 Address—1.3B 
IPv6 Address—1.3C Network Monitoring Utilities—4.4A 


Network+ 5.2—Explain the purpose of network scanners: Packet sniffers, intrusion 
Objective detection software, intrusion prevention software, and port scanners. 
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Description 


Examples 


Related 
Concepts 


= Network+ 
Objective 
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Intrusion Detection System 5.2B 


An Intrusion Detection System (IDS) is a passive system, which only detects 
unauthorized activity. Microsoft Event Viewer is a type of IDS system. It monitors 
activities on a host computer but does not prevent unauthorized activity. 


Internet 


Network Monitoring Utilities—44A | Intrusion Prevention System—5.2C 
Port Scammer o 2D 


5.2—Explain the purpose of network scanners: Packet sniffers, intrusion 
detection software, intrusion prevention software, and port scanners. 
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548 Intrusion Prevention System 


Description An Intrusion Prevention System (IPS) is a reactive system, which means it 
not only detects unauthorized activity, it also performs some function to stop 
the activity. For example, most antivirus software programs not only detect 
unauthorized activity such as an attempt to download and install malware, 
they can also remove malware. 


Examples Internet Client 
na ain Network Monitoring Utilities—4.4A Intrusion Detection System—5.2B 
NS Intrusion Detection and Intrusion Common Firewall Features—6.2A 
Prevention Systems—6.1A 
Antivirus Software—6.6H 
Network+ 5.2—Explain the purpose of network scanners: Packet sniffers, intrusion 
Objective detection software, intrusion prevention software, and port scanners. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Portscanner ~~ -.. 52D 


A port scanner is a software program that scans a network’s TCP/IP ports to 
uncover open unused ports. Open ports can be a way for intruders to gain 
access to the network system. Open ports are one of the most common security 
problems for any site. All unused ports should be closed, and all ports should 
be monitored for activity. A third-party utility or the netstat utility can be used 
to check for open ports. 


Name of remote 


Computer name computer Port number of 
Port b remote computer 
Port number 
TCP and UDP de 
TSE l Connection 
RULOS C:WINDOWS>)netstht -a / of y state 
Active Connectibns f A $ A 
LocalVaadress y ForcignMhayetss State JE 
computer :4433% COMPUTERS S LISTENING 
computer: 5008 COMPUTER: LISTENING 
computerinbsess iis COMPUTER: # LISTEMIMG 
computer: 14334 ae 
computer: nbnane i- 
computer:nbdalagram 
computer: 190 
cenputor: 1141 
Port Numbers—1.2A Network Monitoring Utilities—4.4A 
Netstat—5.1I Intrusion Detection System—5.2B 


Intrusion Detection and Intrusion 
Prevention Systems—6.1A 


5.2—Explain the purpose of network scanners: Packet sniffers, intrusion 
detection software, intrusion prevention software, and port scanners. 
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5.34 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Network Hardware Tools 


Troubleshooting requires not only knowledge about the various utilities and 
tools available, but also their application. 


Tool Application 

Cable tester A network cable tester performs a series of checks of cable 
integrity. Cable faults such as opens, shorts, and grounds can 
be quickly determined and located. Many cable testers can also 
check for crosstalk, radio interference, EMI, and excessive cable 
lengths and can determine the exact location of a cable fault. 


Protocol analyzer | Used to capture and monitor data frames traveling across the 
network media. While most protocol analyzers monitor only 
TCP/IP, more sophisticated protocol analyzers can monitor 
hundreds of different protocols. 


Used to test copper core network cable by sending an electronic 
pulse down the copper core cable and then reads signal bounce 
to locate cable faults. 


Used to locate faults in the fiber-optic cable core. 
Toner probe Used to trace the exact location of cable runs inside walls, 
ceilings, or under the floor or to identify unmarked cables. 
Punch down tool | Used for pushing individual twisted pair wires into an 


insulation-displacement connector (IDC) and automatically 
trimming conductor excess. 


Cable stripper Used to strip the insulation from a cable. 


Snips Used to cut cable. 


Network Troubleshooting Methodology—4.6A 


Troubleshooting Connectivity Issues—4.7A 


5.3—Given a scenario, utilize the appropriate hardware tools: Cable testers, 
protocol analyzer, certifiers, TDR, OTDR, multimeter, toner probe, butt 

set, punch down tool, cable stripper, snips, voltage event recorder, and 
temperature monitor. 
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Intrusion Detection and Intrusion Prevention Systems 6.1A 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


All security protection systems, both software and hardware, can be classified 
as either Intrusion Detection System (IDS) or Intrusion Prevention System 
(IPS). The detection system can be either host-based or network-based. A 
host-based system is installed on the individual computer and monitors and 
prevents unauthorized activity. Network-based systems monitor and protect 
the entire network. 


Security System IDS/IPS Classification 
Network-based IPS 
firewall 


Host-based firewall 


Function 


Passes or blocks packets as they 
enter or leave a network system. 


Passes or blocks packets as they 
enter or leave the host device. 


Creates a private connection over 
a public network. PPTP, L2F, L2TP, 
and IPSec protocols allow a VPN 
to provide four basic features 
common to all VPN connections: 
authentication, access control, 
confidentiality, and data integrity. 


VPN concentrator | IPS 


Network Monitoring Utilities—44A  Netstat—5.il 
Intrusion Detection System—5.2B Intrusion Prevention System—5.2C 
Pore Scanner — 9.21) Common Firewall Features—6.2A 


Antivirus Software—6.6H 


6.1—Explain the function of hardware and software security devices: 
Network-based firewall, host-based firewall, IDS, IPS, and VPN concentrator. 
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6.2A 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Common Firewall Features 


There are several classifications of firewalls, such as packet filter, application 
gateway, content filter, and circuit level gateway. A typical firewall consists 

of two or more filtering techniques. Often, network devices are identified 

as performing firewall functions in addition to their intended purpose. For 
example, a network gateway can also perform functions associated with a 
firewall by filtering packets based on IP address, port number, or MAC address. 


Firewall Feature Function 


Application gateway | Provides security for specific applications such as FTP and Telnet. 


Circuit-level gateway | Monitors a connection until the connection is successfully 
established between the destination and source host. After the 
connection is established, packets can flow freely between the 
two hosts. 


Content filter Provides security based on the packet contents. 


The area of a network that permits access from a host located 
outside the local area network. It is not protected by the firewall. 


Works in similar fashion as antivirus protection by 
intercepting a packet and comparing it to specific malware 
attributes. When the attributes match, it removes the packet. 


Firewall signature 
identification 


Packet filter Inspects each packet as it passes through the firewall and 


then accepts or rejects the packet based on a set of rules. 


Inspects the sequence of packets in order to detect missing 


Stateful packet 

inspection packets or an altered sequence of packets. 

Stateless packet Inspects and filters attributes such as IP address, port number, 
and protocols. 


inspection 


Port Numbers—1.2A MAC Address—1.3A 
IPv4 Address—1.3B IPv6 Address—1.3C 
Firewall—3.]J Multifunction Network Devices—3.2D 


6.2—Explain common features of a firewall: Application layer vs. network 
layer, stateful vs. stateless, scanning services, content filtering, signature 
identification, and zones. 
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Media Access Control Filter 6.3A 


Description A Media Access Control (MAC) filter is a feature that allows or restricts WAP 
access based on the MAC address of a wireless network card. To set up a MAC 
filter, an administrator creates an Access Control List (ACL). The ACL contains 
a list of MAC addresses belonging to authorized wireless network devices. The 
ACL is stored in the Wireless Access Point (WAP). When a wireless network 
device attempts to access the network through the WAP, the WAP checks the 
ACL to see if the wireless network device is authorized to access the network. 


Examples This computer is . 
P denied access to the io Pelee network 

network because pe || | = al 
MAC address of its 00 BO 32 2A 21 D1 
wireless network card E 
is not in the ACL EEES aa 

bless rasrada eS Wireless network 

A NANG ad ces = card MAC address: 


00 C1 54 3C 16 B1 00 CO 12 2B 14 C5 


00 CO 12 2B 14 C5 
00 C1 54 3C 16 B1 


Access Control List 
Related MAC Address—1.3A 802.11 a/b/g/n—1.7A 
com Authentication—1.7B NIC—3.1D 
Wireless Access Point—3.1H 
Network+ 6.3—Explain the methods of network access security: Filtering (ACL, MAC 
Objective filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 


and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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ID a a E DO 


Description Security Sockets Layer (SSL) is a security protocol used to authenticate clients 
and servers and to encrypt data. SSL was first introduced and developed by 
Netscape Communications Corporation. It was designed to secure transactions 
between Web servers and individuals using the Internet for such purposes as 
credit card transactions. 


Exam ples Indicates 


Web Server is 
using SSL 


amazoncom. 


SION IN SHIPPING & PAYMENT 


Choose your shipping options 


Shipping Details (Leam more) 

Choose a shipping speed: 

© FREE Super Saver Shipping (5-9 business days ) 2. 
@ Standard Shipping (3-5 business days ) 

C Two-Day Shipping (2 business days ) 

C One-Day Shipping (1 business day ) 


Items: Need to Changs guanimies a dele 7 
Shipping ta: JoAnne Keltner, 52 Country Squire Rd., Palos Heights, IL, 60463 United States 
e Novell Certified Linux Professional Study Guide - Emmett Dulaney 


$32.99 - Quantity; 1 - Usually ships in 24 hours 
Condition: new 
Sold by Borders teamed with Amazon.com 


Does your order contain gift items? (1) 


m Ordering a gift? Check this box to see gift options before checkout. 


Related Port Numbers—1.2A HTTPS—6.5B 
Concepts 

Network+ 6.3—Explain the methods of network access security: Filtering (ACL, MAC 
Obj ective filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 


and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


L2TP = 6.3C 


Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol that uses IPSec to 
encrypt the contents of the encapsulated PPP protocol. 


IPSec used to 
encrypt the 
contents of the 
L2TP encapsulated 
PPP protocol. M~ 


i 


Encrypted data E 


IPSec—6.3E PPP—6.3I 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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6.3D 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


PETE 


Point-to-Point Tunneling Protocol (PPTP) is a remote access protocol that is an 
enhanced version of PPP. It is designed to enhance security and to make use of 
a virtually private network using the public Internet. 


VPN—2.7C PPP—6.3I 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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(A [sec AA 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Security (IPSec) is an IETF standard for securing point-to-point connections 
in an IP-based network using encryption techniques. There are two standard 
modes of IPSec implementation: transport mode and tunnel mode. In tunnel 
mode, the payload and the header, which contains routing information, is 
encrypted. In transport mode, only the payload is encrypted. Some of the 
more common security technologies that can be implemented with IPSec 

are ESP, IKE, AH, MDS, SHA-1, 3DES, AES, and more. The two common 
protocols associated with IPSec are Encapsulated Security Payload (ESP) 
and Authentication Header (AH). Authentication can also be verified using 
Kerberos, a preshared key, or digital certificate. 


ca a 


Original IP packet 


IP header | — = ta 4 Transport mode 


Encrypted 


IP header | Data | Tunnel mode 
A et 


Gateway /router 


VPN—2.7C 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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6.3F 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


RAS 


The Remote Access Service (RAS) allows users to dial into a remote access 
server and use the network as if their computers were on the remote access 
user’s LAN. 


Database Office PC 


server E | 
- aa | 
! 


Office printer 


Mail server 


Remote access 
serve 
e 


=S 


| 
| 
| 
| 


Remote access client 


T-Carrier—2.5C POTS/PSTN—2.5K 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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RDE — = = 08 


The Remote Desktop Protocol (RDP) is a presentation protocol that allows 
Windows computers to communicate directly with Windows-based clients. 
The Remote Desktop Protocol is transmitted across any TCP/IP connection. 
RDP provides security by encrypting the contents of packets sent across the 
TCP/IP network. Port 3389 is the default port used for RDP and must be 
opened when a firewall is used. 


Display 


Keyboard + mouse 


Port Numbers—1.2A Firewall—3.1J 
PPP—-6.31 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSe 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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632 3. PPPoE 


Descriptio n Point-to-Point Protocol over Ethernet (PPPoE) provides one or more hosts on 


Examples PPPoE clients 


an Ethernet network the ability to establish an individual PPP connection with 
an ISP. PPPoE frames the PPP protocol so that the PPP frame can travel over 
an Ethernet network. 


E 


DSL or Cable modem 


High-speed 
access 


Hub, router, 
or gateway ISP with 
PPPoE 


server 


Each PPPoE client 
has an individual 
connection to the ISP 


ell NAT—14D xDSL—2.5D 
El i Cable Modem—2.5E z PPP—6.31 
Network+ 6.3—Explain the methods of network access security: Filtering (ACL, MAC 
Obj ective filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, TESE), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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EEP” PA A! 


Description Point-to-Point Protocol (PPP) enables a PC to connect to a remote network 
using a serial line connection, typically through a telephone line. It can 
support multiple protocols such as IPX, AppleTalk, and TCP/IP. 


Examples PPP enables a 
connection to a 
remote network via PPP is capable of 
a serial line. carrying various 


protocols, such as 
Len IPX/S.x 
and AppleTalk. 


Local Central Office 


To long distance carrier ———>- 
and remote network 


— Networking Protocols—1.1A POTS/PSTN—2.5K 
oncepts 

Network+ 6.3—Explain the methods of network access security: Filtering (ACL, MAC 
Obj ective filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 


and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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6.3] 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


VNC 


A virtual network connection (VNC) is a term used to describe the broad 
category of remote connection systems that allow a user to connect to a 
network device, such as a server or a desktop computer from a remote device 
such as a laptop, palmtop, or cell phone. Typically, the user attaches to the 
remote network either wirelessly or through an Internet connection. Because 
the remote user is not actually a physical part of the network the user is 
accessing, the connection is considered “virtual.” 


cia a 


Router l 
A VNC server /network 
VNC client computer 
RDP—6.3G ICA—6.3K 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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Examples 


Related 
Concepts 


Network+ 
Objective 


Wa Cc > 


Independent Computer Architecture (ICA) is a proprietary protocol designed 
by Citrix Systems to support the exchange of software applications between 
a server and client. Citrix ICA and Microsoft Remote Desktop Protocol (RDP) 
are the two main choices for this application. 


Citrix server Citrix client 


RDP—6.3G 


6.3—Explain the methods of network access security: Filtering (ACL, MAC 
filtering, IP filtering), tunneling and encryption (SSL VPN, L2TP, PPTP, IPSec), 
and remote access (RAS, RDP, PPPoE, PPP, VNC, ICA). 
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6.4A 
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Related 
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PKI 


Public Key Infrastructure (PKI) is the use of public keys (encryption keys) 

to create a secure environment for the exchange of data between network 
devices. PKI is a form of encryption and authentication. There are two main 
types of key encryption methods: symmetric-key encryption and asymmetric- 


key encryption. 


Symmetric Key Encryption 


Station1 Station2 


Same keys 
Message: A Tracey = Hi Tracey 
db, 


-r kjhhoiuhsjnsmlicijwknwlcij 3 Dc 


Asymmetric Key Encryption 


Station! A 


Different keys 
EN Hi A CA Hi má 


Al message: kjhhoiuhsjnsmlicijwknwlcij 3 O atin 


Kerberos—6.4B AAA—64C 

RADIUS—6.4D TACACS+—6.4E 
802.1x—6.4F CHAP and MS-CHAP—6.4G 
EAP—6.4H 


— eee 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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Kerberos A Y 


Description Kerberos is a security authentication system that provides both authentication 
and encryption services. It uses a two-way method of authentication. 


Examples Kerberos 


Credit card number: Data before the encryption 
123-4567-7890 key is applied 


Encryption key 
Tofhé:1(1)pWSth47%m9%fkér Data after the encryption 
gd!~sjiFkbL80DgBW$f]*g key is applied 
KLA#&GH48Ui(m0E3gHB 
Tofh&l(l)pWSth47%m%fk& | Data transmitted in 
gd!~sjiFkbL80DgBW$fJ^g encrypted form 
KLA#&GH48Ui(m0E3gHB 
Decryption key 
Credit card number: Data after decryption 
123-4567-7890 key is applied 
Related PKI—6.4A AAA—64C 
Concepts RADIUS—6.4D TACACS+—64E 
802.1x—6.4F CHAP and MS-CHAP—6.4G 
EAP—6.4H 
Network+ 6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
Obj ective TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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6.4C 
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Related 
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AAA 


Authentication, Authorization, and Accounting (AAA), also known as triple A, 
is a security standard that consists of three parts: authentication, authorization, 
and accounting. Authentication is the process of verifying the identity of the 
user. It incorporates various authentication models typically designed around 
a user name and user password. Authorization is the process of identifying 
which system resources a user may use. User share permissions are an 
example of authorization. Accounting is a system that tracks what resources a 
user accesses and keeps a record of user activity. 


Authentication Authorization 


Accounting 


Verifying user identity. 


Identifying which system + Tracking what resources a 
resources a user may use. 


user accesses and keeping a 
record of user activity. 


PKI—6.4A Kerberos—6.4B 
RADIUS—6.4D TACACS+—6.4E 
802.1x—6.4F CHAP and MS-CHAP—6.4G 
EAP—6.4H 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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Concepts 


Network+ 
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RADIUS 6.4D 


Remote Authentication Dial-In User Service (RADIUS) is a service that allows 
remote access servers to authenticate to a central server. RADIUS is referred to 
as a “port authentication” standard. Microsoft refers to it as an “802.1x security 
standard.” 802.1x requires three components: supplicant, authenticator, and 
authentication server. The supplicant is the wireless network device that is 
requesting network access. The WAP functions as the authenticator and does 
not allow any type of access to the network without proper authentication. A 
server running Remote Authentication Dial-In User Service (RADIUS) acts as 
the authentication server. 


Authentication server 


Wired Network eee ith 
— RADIUS 
installed 
Supplicant 
Authenticator f 
Laptop with 
wireless network 
device Wireless Access Point 
PKI—6.4A Kerberos—6.4B 
AAA—6.4C TACACS+—6.4E 
802.1x—6.4F CHAP and MS-CHAP—6.4G 
EAP—6.4H 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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6.4E 
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Examples 


Related 
Concepts 


Network+ 
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TACACS + 


TACACS+ is a Cisco proprietary client/server security method that directs 
client requests to the authentication server in similar fashion as Microsoft 
RADIUS. It is an alternative to RADIUS for security. 


TACACS+ 
Uses connection-oriented TCP. 


RADIUS 


Uses connectionless UDP. 


Uses one database for authentication, 
authorization, and accounting. 


Uses separate databases for 
authentication, authorization, and 
accounting. 


Encrypts the entire exchange of logon 
packets. 


Encrypts only the password. 


Uses a token-based authentication 
method. 


Uses a token-based authentication method. 


PKI—6.4A Kerberos—6.4B 

AAA—64C RADIUS—6.4D 

802.1x—6.4F CHAP and MS-CHAP—6.4G 
EAP—6.4H 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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802.1x ll... Ae 


802.1x provides port-based, network access control, which supports 
authentication for Ethernet network access. 802.1x is primarily used for client/ 
server-based networks. It allows the network server to authenticate a wireless 
network device when the wireless network device attempts to connect to the 
wired network through a WAP. 802.1x requires three components: supplicant, 
authenticator, and authentication server. 


Authentication server 
ne ee 


== 


Server with 
¡| RADIUS 
|| installed 


Wired Network 


Supplicant 


Authenticator § | 


Laptop with 

wireless network 

device Wireless Access Point 
PKI—6.4A Kerberos—6.4B 
AAA—6AC RADIUS—6.4D 
TACACS+—6.4E CHAP and MS-CHAP—6.4G 
EAP—6.4H 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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6.4G 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


CHAP and MS-CHAP 


Challenge Handshake Authentication Protocol (CHAP) is an authentication 
protocol that sends an encrypted string of characters representing the user name 
and password. It does not send the actual user name and password. Microsoft 
Challenge Handshake Authentication Protocol (MS-CHAP) is an enhanced 
version of CHAP that encrypts not only the user name and password but also 
the data package. MS-CHAP must be used with Microsoft operating systems. 


with a remote server using PPP. 


Remote client 


2. Remote server sends the remote 
client a key. 


Encrypted key 
representing 
password and user 
name 


TS ih 
pemotcalient 3. Remote client uses key to encrypt 
user name and password. 


Encrypted key 
representing 
password and user 
name 


Remote client 
4. Remote server accepts or rejects 
connection. 


1. Remote client establishes a connection 


Remote server 
(authentication agent) 


Remote server 
(authentication agent) 


Remote server 
(authentication agent) 


Remote server 
(authentication agent) 


eee 


PKI—6.4A Kerberos—6.4B 
RADIUS—6.4D TACACS+—6.4E 
EAP—6.4H 


AAA—64C 
802.1x—6.4F 


eee 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


EAP 


6.4H 


Extensible Authentication Protocol (EAP) ensures authorized access to the 
network system and network resources. It is used on both wired and wireless 
network systems. There are numerous variations of the original EAP standard 
such as EAP-MD5, EAP-TLS, EAP-IKEv2, EAP-AKA, EAP-FAST, and 
EAP-SIM. The most commonly encountered variations are PEAP and LEAP. 


TEEE 802.1x 
authentication 
is enabled 


Computer is 
selected to be 


WLAN properties 1 


[Association] Authentication | Connection) 


Select this option to provide authenticated network access for 
| wireless Ethernet networks, 


Enable IEEE 802.1x authentication for this network 


Smat Caidos other Cenilicate 


Authenticate as computer when computer information is available 


C] Authenticate as guest when user or computer information is 
unavailable 


authenticated 
PKI—6.4A Kerberos—6.4B 
RADIUS—6.4D TACACS+—6.4E 


CHAP and MS-CHAP—64G 


Extensible 
Authentication 
Protocol (EAP) types 


AAA—6.4C 
802.1x—6.4F 


6.4—Explain methods of user authentication: PKI, Kerberos, AAA (RADIUS, 
TACACS+), network access control (802.1x), CHAP, MS-CHAP, and EAP. 
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6.54 SSH 


Description Secure Shell (SSH) provides secure network services over an insecure network 
medium, such as the Internet. SSH was originally designed for UNIX systems 
to replace Remote Login (rlogin), Remote Shell (rsh), and Remote Copy (rcp). 
SSH is associated with TCP/IP port 22. It requires the use of a private and a 
public key and a password. 


Examples “2 default. SSH Secure Shell 
|| Ele Edt view window Help 
A E A A A 
[98/4098 5068455 % OW 
|| E) Quick Connect CJ Profiles 
SSH Secure Shell 3.2.9 (Build 283) = 
Copyright {c} 2000-2003 SSH Communications Security Corp - http://www. ssh. com/ 
{This copy of SSH Secure Shell is a non-commercial version. 
i This version Anar Mak inntdida NIT anna M7C š?) Favs nei ana li err = 
ConecttoRemoteHost. 
i Ta Hist Nome: [192.168.10.20 
User Name: fikeltner Cancel | 
Port Number: [22 
Authentication Method: [Password +] 
Public Key 
SeculD 
PAM 
Keyboard Interactive 
<Profile Settings> 
Not connected - press Enter or Space t [TRAC Tz 
Related 
C t Networking Protocols—1.1A Port Numbers—1.2A 
oncepts 
p SFTP—6.5D SCP—6.5E 
Network+ 6.5—Explain issues that affect device security: Physical security, restricting 
Objective local and remote access, and secure methods vs. unsecure methods (SSH, 


HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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= 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


HTTPS - SS oP 


The Hypertext Transport Protocol over SSL (HTTPS) is designed for 
secure communications between a Web browser and a Web server. When 
a secure connection is used, the protocol in the Web address is identified 
with “https” rather than “http.” The s at the end of http indicates a 
secure site. HTTPS uses the Secure Sockets Layer (SSL) security protocol. 


Indicates a secure 
connection 


QAmaron.com Checkout: Select Shipping Lotions - Micnosalt Entes #cotia ty 


Address |) https: /www.amazon.com{gp{checkout/address/select. htm) 103-2177419- 


amazon.com. - 


SIGN IN SHIPPING £ PAYMENT 


Choose your shipping options 


Shipping Details (Leam mora) 

Choose a shipping speed: 

C FREE Super Saver Shipping (5-9 business days ) e. 
@ Standard Shipping (3-5 business days ) 

© Two-Day Shipping (2 business days ) 

C One-Day Shipping (1 business day ) 


Items: Need to Change quantities or delete > 
Shipping to: JoAnne Keltner, 52 Country Squire Rd., Palos Heights, IL, 60463 United States 
+ Novell Certified Linux Professional Study Guide - Emmett Dulaney 
$32.99 - Quantity: 1 - Usually ships In 24 hours 
Condition: new 
Sold by Borders teamed with Amazon.com 


Does your order contain gift items? (8 


[— Ordering a gift? Check this box to see gift options before checkout. 


Seatique O) 


Networking Protocols—1.1A Port Numbers—1.2A 
SSL—6.3B 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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6.5C 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


SNMP 


Simple Network Management Protocol (SNMP) enables an administrator to 
manage and monitor network devices and services from a single location. 
SNMP can monitor network devices such as servers, workstations, hubs, and 
routers, and services such as DHCP and WINS. An SNMP service consists of 
an SNMP management system and SNMP agents. The SNMP management 
system queries SNMP agents for information, such as the status and 
configuration of network devices and services. The SNMP agents gather this 
information and store it in a management information base (MIB). 


5) 


Server with a SNMP 
management 


system installed 


e 
Workstation with SNMP 
agent installed 


ME E Workstation with SNMP 
Workstation with SNMP agent installed 
agent installed 
Networking Protocols—1.1A y Port Numbers—1.2A 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


SFTP | | 6.5D 


Secure File Transfer Protocol (SFTP) is a secure version of FTP that encrypts 
the user name, password, and data to provide the highest level of security 
compared to FTP and TFTP. SFTP should be used when transferring sensitive 
data and when security is required. 


User name, 
password, and data 
are encrypted. 


[ea 


iy 
| | 


7 AS | ii 
SFTP client NE 


SFTP server 


Networking Protocols—1.1A Port Numbers—1.2A 
FTP—6.5G 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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6.5E 


Description 


Related 
Concepts 


Network+ 
Objective 


SCP 


Secure Copy Protocol (SCP) provides a secure way of transferring files 
between computers. It is the replacement for rep. 


scp filel.txt linuxserver:/home/joanne/data 


/home/joanne 


Secure Copy Protocol 


linuxserver 
Networking Protocols—1.1A Port Numbers—1.2A 
SSH—6.5A SFTP—6.5D 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
ENTES, SNMPv3, SFTE SEPA telnet, HITE, FIP, RSE RG SNMP IO 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 
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HTTP to -6.5F 


The Hypertext Transfer Protocol (HTTP) is a protocol designed for 
communication between a Web browser and a Web Server. 


Web browser 


Web server 


Networking Protocols—1.1A Port Numbers—1.2A 
HTTPS—6.5B 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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6.5G 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


FTP 


File Transfer Protocol (FTP) is a service that can be incorporated into a Web 
server to support file transfers between a client and server. It is often used to 
upload Web pages to Web hosting servers. FTP is accessed using an FTP client 
that is either text-based or GUI-based. When using a text-based FTP client, a 
series of commands are issued at an FTP prompt similar to the way commands 
are issued at a DOS prompt. 


FTP Command | Description 


sin 


Exit the FTP program. 


Change the directory on the FTP site. - 
Transfer a file from the FTP site to the client. 


Display FTP commands. 


Change the directory on the client. 


Open a connection to an FTP site. 


Transfer a file from the client to the FTP site. 


Display the current directory of the FTP site. 
Close the FTP session. 


Networking Protocols—1.1A Port Numbers—1.2A 
SFTP—6.5D 


6.5—Explain issues that affect device security: Physical security, restricting 
local and remote access, and secure methods vs. unsecure methods (SSH, 
HTTPS, SNMPv3, SFTP, SCP, Telnet, HTTP, FTP, RSH, RCP, SNMPv1/2). 
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A A A 


Description Denial of Service (DoS) is one of the most common attacks on servers. Denial 
of Service is, as the name implies, denying access to a server by overloading 
the server with bogus requests. The DoS attack overloads the server to the 
point that the server crashes or is not able to complete legitimate user requests. 


Examples 
Flood of bogus requests 
Legitimate user 
Legitimate denied service 
user 
Web server 
Attacker 
Attacker 
Sie Viruses—6.6B Worms—6.6C 
oncer> Man in the Middle—6.6D Smurf Attack—6.6E 
Rogue Access Points—6.6F Social Engineering —6.6G 
Antivirus Software—6.6H 
Network+ 6.6—Identify common security threats and mitigation techniques: Security 
Objective threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 


access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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6.6B 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Viruses 


A virus is a type of malware that replicates itself on a computer after infecting 
it. A virus usually has three phases: infection, replication, and execution. The 
infection comes from a source such as a floppy disk, CD, e-mail, or network 
connection such as the Internet. Replication is when the virus duplicates itself 
to other programs, files, drives, or other computers on a network. Execution 
can take many forms, such as harmless, annoying, and destructive. 


Source of virus 


de EE Te 
Workstation 


Virus may 
spread to 
other 
computer 


LD et 
Workstation 


cor RSS ORaa 


AAA 


Infected 
workstation 


Server 


Workstation 


CD 
1. Infection. One 


workstation receives 
virus. 


2. Replication. Virus 
spreads to files, programs, 
and other computers 


3. Execution. Virus 
can be harmless, 
annoying, or destructive. 


on network. 


DoS—6.6A 
Man in the Middle—6.6D 
Rogue Access Points—6.6F 


Worms—6.6C 
Smurf Attack—6.6E 


Social Engineering —6.6G 
Antivirus Software—6.6H 


6.6—Identify common security threats and mitigation techniques: Security 
threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 
access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Worms . -6.6C 


A worm penetrates a computer and may reproduce itself. It does, however, 
infect other computer systems. Technically speaking, a worm is not a true 
virus, but rather its own destructive program. A virus replicates itself on one 
computer and infects files on that particular computer. A worm infects files 
on the infected computer and automatically spreads to other computers. The 
fact that the worm automatically spreads its own infection is what makes it 
different from a virus. 


| 5 more PCs infected 
| Each PC infects 5 more... 


3 | 25 more PCs infected 
| Each PC infects 5 more... 


| 125 more PCs infected 
Each PC infects 5 more... 


A 
across the globe very rapidly 


DoS—6.6A Viruses—6.6B 
Man in the Middle—6.6D Smurf Attack—6.6E 
Rogue Access Points—6.6F Social Engineering —6.6G 


Antivirus Software—6.6H 


6.6—Identify common security threats and mitigation techniques: Security 
threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 
access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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6.6D 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Man in the Middle 


Man in the middle (MITM) is a method of intercepting a network transmission, 
reading it, and then placing it back on route to its intended destination. 


Data 


Man in the 
middle attack 


E oog 
Man in the Middle Attack 
DoS—6.6A Viruses—6.6B 
Worms—6.6C Smurf Attack—6.6E 
Rogue Access Points—6.6F Social Engineering—6.6G 


Antivirus Software—6.6H 


6.6—Identify common security threats and mitigation techniques: Security 
threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 
access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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Smurf Attack 6.6E 


Description Smurf attack is a type of DoS that consists of spoofing the target address and 
then pinging the target broadcast address. 


Examples Data sent with fake 
” source IP address 
126.50.6.12 —— E 
201. 0.1 
ae source 
Spoofing IP address 
Tiled DoS—6.6A Viruses—6.6B 
ong Worms—6.6C Man in the Middle—6.6D 
Rogue Access Points—6.6F Social Engineering—6.6G 
Antivirus Software—6.6H 
Network+ 6.6—Identify common security threats and mitigation techniques: Security 
Ob j ective threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 


access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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6.6F 


Description 


Examples 


Related 
Concepts 


Network+ 
Objective 


Rogue Access Points 


A rogue access point is an unauthorized Wireless Access Point that is installed 
on a network system. It provides a means to compromise the security of a 
network. Any network user could add a WAP to an existing network, thus 
allowing anyone to gain access to the network. Rogue access points can be 
prevented by using a wireless intrusion prevention system (WIPS). The WIPS 
automatically conducts radio scans to identify the existence and location of the 
rogue access point location. Another method of preventing the successful use 
of a rogue access point is the use of an 802.1x system such as RADIUS. 


Gps 2 Ta B 


Rouge access 
point 


RADIUS—6.4D 802.1x—6.4F 

DoS—6.6A Viruses—6.6B 
Worms—6.6C Man in the Middle—6.6D 
Smurf Attack—6.6E Social Engineering—6.6G 


Antivirus Software—6.6H 


6.6—Identify common security threats and mitigation techniques: Security 
threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 
access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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Description 


Examples 


Related 


Concepts 


Network+ 
Objective 


Copyright by Goodheart-Willcox Co., Inc. 


Social Engineering 6.6G 


Social engineering is a term used to describe the manipulation of personnel 
by the use of deceit to gain security information. One of the weakest security 
areas is the gullibility of typical users and their respect for assumed authority. 


Gene’s system has been compromised by the social engineering technique: 


Caller: Hello. This is Bob down at IMS operations conducting a security 
check. We believe we may have an intruder in our system. 

Gene Gullible: Yes. What can I do to help? 

Caller: Well, Gene, I need to look at your PC files to see if there have been 
any possible intrusions. I need your user name and password to inspect your 
system. It will only take a minute and will save me a lot of time rather than 
coming down there. 

Gene Gullible: Sure. My user name is ggullible, and the password is toocool. 


DoS—6.6A Viruses—6.6B 
Worms—6.6C Man in the Middle—6.6D 
Smurf Attack—6.6E Rogue Access Points—6.6F 


Antivirus Software—6.6H 


6.6—Identify common security threats and mitigation techniques: Security 
threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 
access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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6.6H Antivirus Software 


Description Antivirus software is typically used to scan files and e-mail for viruses. It can 
be configured to run in the background and scan files and e-mail as they are 
accessed. Antivirus software consists of a scan engine and a virus pattern file. 
The virus pattern file is a database of virus signatures, or codes, unique to each 
known virus. The scan engine is a software program that performs the function 
of reading each file indicated in the scan configuration and checking it against 
the virus signatures in the virus pattern file. 


Examples Pr Trend Mero Internet Secu 
TREND MICRO Internet Security $ isyo 


AERC Now Scen Now 
b , 


System 

Manually check files, folders, or drives for viruses or other 
Allows malicious code. Yau can also choose the file types to scan and the 

actions to perform as well as automate routine scan procedures 
update of __ by setting tasks. 


virus 
pattern file 


D: Scan Files 4 į Scan Tasks 
A Scan and clean Specify scan tasks 
O files e 
Antivirus 


B Scan Settings } Quarantine . 
=j Configure virus i 1 Access Quarantine i suite 
I scan settings = list E 


User can 
select action 
to take on 

infected files 


and malware Infected files that cannot be cleaned 


and malware programs are placed in 
a special folder, called quarantine, 
where they cannot cause further harm. 


es Intrusion Detection System—5.2B Intrusion Prevention System—5.2C 
ES Intrusion Detection and Intrusion | DoS—6.6A 

Prevention Systems—6.1A 

Viruses—6.6B Worms—6.6C 

Man in the Middle—6.6D Smurf Attack—6.6E 

Rogue Access Points—6.6F Social Engineering—6.6G 

pe xn E "A A ee 

Network+ 6.6—Identify common security threats and mitigation techniques: Security 
Obj ective threats (DoS, viruses, worms, attackers, man in the middle, Smurf, rogue 


access points, social engineering) and mitigation techniques (policies and 
procedures, user training, patches and updates). 
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ee 
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Notes 


D o A 
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